Privacy Policy

1. Data controller

Datalysis Group is responsible for processing data through the Datalysis platform.

If an organization uses Datalysis under a business agreement, some data may be processed under the applicable agreements between Datalysis and that organization.

• Privacy and support contact: datalysisgroup@gmail.com

2. Information we collect

Datalysis collects only the information necessary to provide, protect, and improve its business services.

• Account and profile information: name, email address, user or account identifier, and associated company information.
• System operating information: activity logs, user settings, and use of business modules.
• Tax and document information: imported or registered DTE, supplier, generation code, document type, date, amounts, VAT, products, services, accounts, payment terms, and related data.
• Attachments: PDF documents associated when the user chooses to import or link them to a document.

3. Use of Google and Gmail accounts

Datalysis allows users to connect a Gmail account through OAuth 2.0 to search for and import DTE received by email.

For this feature, Datalysis requests the openid, email, profile, and https://www.googleapis.com/auth/gmail.readonly permissions.

• Identify the connected Google account.
• Read inbox emails within the date range selected by the user.
• Search emails with .json and .pdf attachments.
• Detect JSON files corresponding to DTE.
• Show a preview of detected documents before import.
• Import into the expenses module only the documents selected or confirmed by the user.
• Attach the related PDF when it exists and the import flow requires it.

Datalysis does not use Gmail access to send, delete, modify, or move emails. It also does not read messages outside the flow requested by the user or access information that is not necessary for DTE import.

4. Google data we may process

When the user connects Gmail, Datalysis may process limited data necessary to complete the requested import.

• Email address, name or basic profile information, and Google account identifier.
• Email metadata necessary for the flow, such as sender, subject, received date, and message or thread identifier.
• .json and .pdf attachments detected within the range selected by the user.
• Tax data contained in DTE JSON files.
• OAuth tokens necessary to maintain the connection authorized by the user.

5. How we use data

Datalysis uses collected information to operate the platform and deliver visible features requested by the user.

• Provide and operate the Datalysis platform.
• Enable registration, review, and import of tax documents.
• Prevent duplicates through validations such as generation code.
• Associate imported documents with suppliers, accounts, products, costs, and accounting or tax flows.
• Show search results, preview, and import status.
• Maintain security, operational audit, support, and service continuity.
• Comply with legal, tax, or contractual obligations when applicable.

6. Storage and protection

Data is stored on infrastructure controlled by Datalysis or technology providers necessary to operate the service.

OAuth tokens are stored encrypted in the backend. Datalysis does not expose client secrets or sensitive tokens in the frontend. Temporary OAuth codes used during connection are not stored as persistent data.

Datalysis applies reasonable technical and organizational security measures to protect information against unauthorized access, loss, alteration, disclosure, or improper destruction.

7. Limited use of Google data

Datalysis' use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

• Datalysis only uses Google data to provide or improve user-facing features within the application.
• Datalysis does not sell Google data.
• Datalysis does not use Google data for advertising, retargeting, personalized advertising, or advertising profiles.
• Datalysis does not use Google data to determine creditworthiness or for lending purposes.
• Datalysis does not transfer Google data to third parties except when necessary to operate or improve the feature requested by the user, comply with legal obligations, investigate abuse, or protect service security.
• Datalysis does not allow humans to read Gmail data except when necessary for user-requested support, security, legal compliance, or authorized and limited review.
• Datalysis does not use Google Workspace or Gmail data to train generalized artificial intelligence models.

8. Information sharing

Datalysis does not sell personal information or data obtained from Google. We may share information only in the following cases:

• With infrastructure, storage, security, monitoring, or technology service providers necessary to operate the platform.
• With the business organization to which the user belongs, when use of Datalysis is part of a corporate account.
• When required by law, competent authority, legal process, or tax compliance.
• To protect the rights, security, and integrity of Datalysis, its users, or third parties.
• With the user's explicit consent.

9. Retention and deletion

Datalysis retains data for as long as necessary to provide the service, comply with legal obligations, maintain tax records, or address contractual requirements.

The user may disconnect their Gmail or Outlook account from the platform. When an account is disconnected, Datalysis stops using it for new email searches. Associated tokens are deleted or invalidated as applicable.

Tax documents already imported may be retained according to legal, tax, accounting, or contractual obligations applicable to the user's company.

10. User choices and controls

The user remains in control of connected accounts and the document import flow.

• Decides whether to connect an email account.
• Selects which provider to connect: Gmail or Outlook.
• Defines the date range used to search for DTE.
• Reviews detected documents before importing them.
• Can disconnect a connected account.
• Can request support, updates, or data deletion by writing to datalysisgroup@gmail.com.

11. Cookies and similar technologies

We use essential session cookies to maintain authentication, security, and user operating preferences. We do not use tracking cookies for advertising purposes.

12. Minors

Datalysis is intended for authorized corporate users. It is not directed to minors.

13. Changes to this policy

Datalysis may update this Privacy Policy to reflect legal, technical, or operational changes. If we change how we access, use, store, or share Google user data, we will update this policy and notify users where appropriate before applying those changes.

14. Contact

For questions about this Privacy Policy, data privacy, or the use of Google data in Datalysis, you may contact us at datalysisgroup@gmail.com.