Legal

Privacy Policy

Effective date:
min read
8 min read

This Privacy Policy explains how Dopamina ("Dopamina", "we", "us") handles personal information when you visit dopamina.media or use Dopamina Studio at https://studio.dopamina.media (together, the "Service"). Dopamina Studio is developed and operated by Dopamina, which is responsible for your data; you can reach us at [email protected].

Section 2 explains exactly how Dopamina Studio accesses, uses, stores, protects, shares, retains and deletes data it receives from Google when you sign in with Google or import files from Google Drive.

By using the Service you acknowledge the practices described here. If you do not agree, please do not use the Service.

At a glance

A plain-language summary. The full text below is what applies.

  • Google Drive

    Only the files you pick in Google Picker, via the drive.file scope. Nothing else in your Drive.

  • Never sold

    We do not sell your data or use Google user data for ads.

  • No model training

    Your content and Drive files never train generalized AI models.

  • Your control

    Revoke Google access anytime and ask us to delete your data.

Information we collect

Information you give us

  • Account information: your name, email address, profile photo and the organization or brand workspaces you create or join.
  • Business and brand content: brand briefs, company knowledge, logos, images, videos, documents, prompts, campaigns, posts, replies and other material you upload, create or generate in Studio.
  • Communications: messages you send to our support team or to us by email or WhatsApp.
  • Billing information: plan, billing contact and payment status. Card details are entered directly with our payment processor; we do not store full card numbers.

Information from services you connect

  • Google Sign-In: your name, email address and profile photo (the openid, email and profile scopes).
  • Google Drive: only the specific files you choose in the Google Picker, as described in section 2.
  • Social networks and messaging channels you connect (for example Instagram, Facebook, X, LinkedIn, YouTube, TikTok or WhatsApp): account identifiers, page or profile names, and the posts, comments, messages and metrics needed to publish and respond on your behalf.

Information collected automatically

  • Technical data: IP address, browser type, device information, pages visited, and timestamps.
  • Diagnostic data: error reports and performance traces used to keep the Service reliable.
  • Cookies and similar technologies that keep you signed in and remember your preferences, such as language.

Google API

Google user data

This section describes how Dopamina Studio (the application at https://studio.dopamina.media, developed and operated by Dopamina) accesses, uses, stores, shares, protects, retains and deletes data received from Google APIs ("Google user data"). It applies in addition to the rest of this Policy; where they differ, this section controls for Google user data.

Google user data we access

  • Google Sign-In (scopes openid, email and profile): your name, email address and profile photo.
  • Google Drive (scope https://www.googleapis.com/auth/drive.file only): the specific files you select in the Google Picker window: each file's ID, name, MIME type, size and contents. Google Docs, Sheets and Slides are exported to a standard format (such as PDF) that the destination in Studio accepts.
  • We do not request access to your whole Drive. Dopamina cannot see, list or search any file or folder you have not selected, and never reads your Gmail, Calendar, Contacts or any other Google service.

How we use Google user data

  • Sign-In data is used only to create and authenticate your Dopamina account, show your identity inside Studio, and send you service messages about your account.
  • Drive files are used only to copy the files you choose into the Studio area where you started the import (media library, brand assets or company knowledge), exactly as if you had uploaded them from your computer, and, when you ask, as inputs to features you invoke, such as generating on-brand content or answering questions about your business.
  • Drive import is optional and runs only when you click an import button. We never modify, rename, move, share or delete files in your Google Drive, and we do not create files in it.

How we store and protect Google user data

  • Your Google OAuth access token is held by our authentication provider (Clerk) in encrypted storage. It is never saved in our own database or in your browser's storage; Studio requests a fresh, short-lived token each time you open the Picker.
  • Files you import are downloaded directly from Google to your browser over HTTPS and uploaded to your Studio workspace, where they are stored in encrypted cloud storage isolated per organization.
  • All data is encrypted in transit (TLS). Access is restricted to authorized personnel who need it to operate the Service, protected by multi-factor authentication and logged.

How we share, transfer or disclose Google user data

We do not sell Google user data, and we do not share, transfer or disclose it to third parties except:

  • With service providers that process it on our behalf solely to provide the features described above: authentication (Clerk), cloud hosting and file storage, and AI model providers when you ask Studio to use an imported file. They are bound by confidentiality and data-protection terms and may not use the data for their own purposes or to train their models.
  • With members of your own Studio workspace, who can see files imported into that shared workspace.
  • When required by law, or to protect the security of the Service and its users.
  • As part of a merger, acquisition or sale of assets, with notice to you and subject to this Policy.

Retention and deletion of Google user data

  • Sign-In data is kept while your account is active and deleted within 30 days after you close your account.
  • Imported Drive files stay in your workspace until you delete them, delete the workspace or close your account. Deleted files are removed from active systems promptly and from backups within 90 days.
  • You can revoke Dopamina's access to your Google account at any time at https://myaccount.google.com/permissions. Revoking access immediately stops future imports.
  • To delete your account or any Google user data we hold, including imported files, email [email protected]. We confirm and complete deletion within 30 days.

What we never do with Google user data

  • We do not sell Google user data or provide it to data brokers or information resellers.
  • We do not use or transfer Google user data for advertising, including targeted, personalized, retargeted or interest-based advertising.
  • We do not use Google user data to determine credit-worthiness or for lending purposes, or to create databases unrelated to your use of Studio.
  • We do not use Google user data, including data obtained through Google Workspace APIs such as Google Drive, to develop, improve or train generalized or non-personalized artificial intelligence or machine learning models, and we do not transfer it to third parties for that purpose.
  • We do not allow humans to read Google user data unless you give us explicit consent for specific files (for example, in a support request), it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data has been aggregated and anonymized for internal operations.

Limited Use disclosure

Dopamina's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

How we use information

  • Provide, operate and maintain the Service, including generating content, scheduling and publishing posts, and replying to your community when you ask us to.
  • Authenticate you, secure accounts and prevent fraud or abuse.
  • Process payments and manage subscriptions and credits.
  • Respond to support requests and send service messages such as security alerts and billing notices.
  • Diagnose errors and measure performance so we can fix and improve the Service.
  • Comply with legal obligations and enforce our Terms of Service.

We do not sell personal information, and we do not use the content you upload or import to train generalized AI models.

AI features

Studio's AI agents send the prompts and content needed for a task you request (for example, your brand brief and a selected image) to AI model providers that process it on our behalf to return a result. These providers act as our processors, are contractually restricted from using your data to train their models, and do not receive more data than the requested task needs. AI output can be inaccurate; please review it before publishing.

How we share information

We share personal information only in these cases:

  • Service providers that process data on our behalf under confidentiality and data-protection obligations: cloud hosting and file storage, authentication, payment processing, AI model providers, social-network connection services, error monitoring and product observability.
  • Platforms you connect: when you ask Studio to publish a post or send a reply, the content is sent to that platform under its own terms and privacy policy.
  • Members of your workspace: content in a shared organization workspace is visible to its authorized members.
  • Legal requirements: when required by law, court order or to protect the rights, safety and property of Dopamina, our users or others.
  • Business transfers: in a merger, acquisition or sale of assets, subject to this Policy and with notice to you.

Cookies

We use strictly necessary cookies for sign-in, security and session management, and preference cookies such as your language. We do not use third-party advertising cookies. You can block cookies in your browser, but parts of Studio will not work without them.

Data retention and deletion

We keep personal information for as long as your account is active or as needed to provide the Service. When you delete content, it is removed from active systems promptly. When you close your account, we delete or anonymize your personal information and workspace content within 30 days, except for backups (overwritten within 90 days) and records we must keep for legal, tax or accounting reasons.

To request deletion of your account or of specific data, including files imported from Google Drive, email [email protected].

Security

We protect data with encryption in transit (TLS), access controls limited to authorized personnel, scoped and short-lived OAuth tokens, and monitoring. No method of transmission or storage is completely secure, but we work to protect your information and will notify you of a breach affecting your data as required by law.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict certain processing, and to withdraw consent. Residents of Mexico may exercise their ARCO rights (access, rectification, cancellation and opposition). To exercise any of these rights, email us; we will respond within the time required by applicable law.

  • Edit your profile and delete content directly in Studio.
  • Disconnect Google or any social account from Studio or from the provider's own settings.
  • Opt out of non-essential emails with the link in each message.

International transfers

We and our service providers may process information in countries other than yours, including Mexico and the United States. When we transfer personal information internationally, we use appropriate safeguards required by applicable law.

Children

The Service is intended for businesses and is not directed to children under 16. We do not knowingly collect personal information from children. If you believe a child has given us information, contact us and we will delete it.

Changes to this Policy

We may update this Policy from time to time. We will post the new version on this page with a new effective date and, for material changes, notify you by email or in Studio before they take effect. If we ever want to use Google user data in a way not described here, we will ask for your consent first.

Contact

Questions or requests about this Policy or your data: [email protected].

Back to top