Install our app 🪄 click on the icon in the top right of the address bar.

Privacy Policy

Dottt.Me (https://dotttme.com) and the Dottt Hyperlocal GBP Management Mobile App. Effective date: October 1, 2026. Last updated: October 1, 2026.

This Privacy Policy explains how Social Cloud Ventures Private Limited ("Dottt", "we", "us" or "our") collects, uses, stores, shares and protects information when you use our Services.

1. Introduction

This Privacy Policy applies when you use:

  • our website at https://dotttme.com and its subdomains (the "Website"), including bio pages, short links, QR codes, file and HTML hosting, analytics, web tools, APIs and related services; and
  • the Dottt Hyperlocal GBP Management mobile application (the "App").

The Website, the App and all related services are together called the "Services". Our Services are intended for businesses and professionals only.

By accessing or using the Services you agree to this Privacy Policy. If you do not agree, please do not use the Services.

Company details
Social Cloud Ventures Private Limited
Metro Pillar Number 133, K 426, 427, Mehrauli-Gurgaon Rd, Ghitorni, New Delhi, Delhi 110030, India
Email: hello@dotttme.com

2. Who this policy applies to

We deal with two groups of people:

  1. Our users – businesses, brands, agencies and individuals who create an account and use the Services ("Users").
  2. End visitors – people who visit or interact with pages, links, QR codes or other content that our Users create using the Services ("Visitors").

For information about our Users, we act as the data controller (or "data fiduciary" under Indian law). For information about Visitors collected through a User's pages, links or QR codes, the User is generally the controller and we act as a processor on the User's behalf.

Users are responsible for giving their Visitors any notices and obtaining any consents that the law requires.

3. Information we collect

3.1 Information you provide to us

  • Account information: name, email address, password (stored in hashed form), company name, phone number, billing details and profile settings.
  • Content you create or upload: bio pages, links, QR code settings, vCards, event details, files, HTML/CSS/JS and media files, custom domains, tracking pixel IDs, and similar content.
  • Lead and customer data you collect: data captured through forms, callback requests, lead capture blocks and similar features on your pages.
  • Communications: messages you send to our support team, feedback, and survey responses.
  • Payment information: when you buy a paid plan, payment is handled by third-party payment processors. We receive confirmation and limited details (such as plan, amount, transaction ID and the last digits of a card). We do not store full card numbers.

3.2 Google account and Google Business Profile data (App and Website integration)

If you connect your Google account to the Services, we request your permission to access:

  • Basic Google account information: your name, email address and profile picture, used to sign you in and identify your account.
  • Google Business Profile data through the Google Business Profile APIs (the business.manage scope), which may include:
    • business locations and general profile information (name, address, categories, hours, phone numbers, website, attributes, photos and descriptions);
    • posts, updates, offers and media;
    • customer reviews and your replies to them;
    • messages and Q&A, where supported;
    • performance insights (for example views, searches, calls, direction requests and website clicks).

We store your Google Business Profile general data, insights data and reviews on our servers so that we can display them, analyse them, generate reports, and let you manage profiles at scale. You can revoke our access at any time (see Section 9).

3.3 Information collected automatically

  • Usage and analytics data: pages and features used, actions taken, clicks, timestamps and referrers.
  • Device and technical data: IP address, browser type and version, operating system, device type and identifiers, language, screen settings, app version and crash/diagnostic logs.
  • Approximate location: derived from your IP address (such as country and city), used for analytics and for time, location and language targeting features.
  • Cookies and similar technologies: see Section 8.

3.4 Information about Visitors to User-created pages and links

When a Visitor opens a link, bio page, QR code or hosted page created through the Services, we automatically collect analytics data such as IP address, approximate location (country, city), device, operating system, browser, language, referrer, UTM parameters and the time of the visit. If the User has enabled tracking pixels, the relevant third-party pixel providers may also collect data directly from the Visitor.

3.4A Device permissions (App)

The App requests only the following device permission:

  • Notifications: to send you alerts such as new reviews, task updates, report availability and service messages. You can disable notifications at any time in your device settings.

4. How we use information

We use the information we collect to:

  • create and manage your account and authenticate you;
  • provide, operate, maintain and improve the Services, including Google Business Profile management, review management, reporting and insights;
  • generate AI-assisted replies to customer reviews and other AI-powered features (see Section 5);
  • provide analytics, dashboards and performance reports;
  • process payments and manage subscriptions;
  • send service messages, security alerts, push notifications and support responses;
  • send product updates and promotional communications, where permitted by law (you can opt out at any time);
  • detect, prevent and investigate fraud, abuse, security incidents and violations of our terms;
  • comply with legal obligations and enforce our rights; and
  • carry out research and analysis using aggregated or de-identified data.

We do not sell your personal information, and we do not use Google user data for advertising.

5. Use of Artificial Intelligence

Some features of the Services, such as automated review replies and AI-generated insights, use large language models (LLMs). We generally use Google's Gemini AI models for this purpose.

When you use an AI feature, the relevant content (for example the text of a customer review and basic business context needed to write a reply) is sent to the AI model provider for processing, solely to generate the output you requested.

AI-generated content may be inaccurate or inappropriate. You are responsible for reviewing it before it is published, unless you have enabled automatic publishing.

Providers of AI models may process data under their own terms and privacy policies. Please review Google's terms and privacy policy for details on how it handles data submitted to its models.

We do not use Google user data obtained through Google Business Profile APIs to develop, improve or train generalized AI or machine-learning models.

6. How we share information

We do not intentionally share your personal information with third parties except where it is needed to operate the Services or where the law requires it. Specifically, we may share information with:

  • Service providers and processors who help us run the Services, such as cloud hosting and storage providers, payment processors, email and messaging providers, analytics providers, customer support tools, and AI model providers. They may use the data only to perform services for us and are bound by confidentiality and data protection obligations.
  • Google, when you connect your Google account or Google Business Profile, because data is exchanged with Google's APIs to carry out the actions you request.
  • Third-party integrations you enable, such as tracking pixels (for example Google Analytics, Google Tag Manager, Meta, LinkedIn, Pinterest, X, TikTok, Snapchat, Quora), CRM tools and messaging platforms. Data flows to these services only when you turn them on.
  • Legal and safety purposes, where we believe disclosure is required by law, regulation, legal process or a government request, or is necessary to protect the rights, property or safety of Dottt, our Users or others.
  • Business transfers, in connection with a merger, acquisition, financing, reorganisation or sale of assets. We will notify you if your information becomes subject to a different privacy policy.
  • With your consent or at your direction.

We may also share aggregated or de-identified information that cannot reasonably be used to identify you.

7. Google API Services – Limited Use disclosure

Dottt's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

  • We use Google user data only to provide and improve the user-facing features of the Services that you request, such as managing your Business Profiles, reviews, posts and reports.
  • We do not transfer or sell Google user data to third parties, except as necessary to provide or improve these user-facing features, to comply with applicable law, or as part of a merger, acquisition or sale of assets.
  • We do not use Google user data for serving advertisements, including retargeting, personalised or interest-based advertising.
  • We do not allow humans to read Google user data unless we have your affirmative consent for specific data, it is necessary for security purposes (such as investigating abuse), it is necessary to comply with applicable law, or the data is aggregated and used for internal operations in accordance with applicable law.
  • We do not use Google user data to develop, improve or train generalized AI and/or machine-learning models.

8. Cookies, push notifications and tracking technologies

On the Website we use cookies, local storage and similar technologies to keep you signed in, remember your preferences (such as language and currency), secure the Services, measure usage and, where enabled, support analytics and tracking pixels.

  • Essential cookies are required for the Services to function.
  • Analytics and functional cookies help us understand and improve the Services.
  • Pixels and third-party tags are loaded only where a User has configured them on their own pages.

You can control cookies through your browser settings. Blocking some cookies may affect the Services.

Web push notifications: if you choose to subscribe, we may send you helpful content and service or promotional messages through your browser. You can unsubscribe at any time from the Website or your browser settings.

9. Your choices and rights

  • Access and update: you can view and update much of your account information in your account settings.
  • Revoke Google access: you can remove Dottt's access to your Google account at any time at https://myaccount.google.com/permissions. After you revoke access, we will stop accessing new Google data. Previously stored data will be handled as described in Section 11.
  • Notifications: disable push notifications in your device or browser settings.
  • Marketing communications: use the unsubscribe link in any email or contact us at hello@dotttme.com.
  • Deletion request: to delete your account and associated data, email hello@dotttme.com from your registered email address with the subject line "Data Deletion Request". We will verify your identity and process your request within a reasonable period, and in any event within the time required by applicable law.

Depending on where you live, you may also have the rights described in Section 12. To exercise any right, contact us at hello@dotttme.com.

10. Data security

We use reasonable technical and organisational measures to protect information, including encryption of data in transit, access controls, secure credential storage and regular backups. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential.

If we become aware of a personal data breach that affects you, we will notify you and the relevant authorities as required by applicable law.

11. Data retention

We retain personal information for as long as your account is active and for up to 36 months afterwards (or after your last interaction with the Services), unless a longer period is required or permitted by law, for example for tax, accounting, legal claims or fraud prevention. Once the retention period ends, or when we complete a verified deletion request, we delete or anonymise the information, except where we are legally required to keep it. Backups are deleted on a rolling schedule.

12. International users and data transfers

Our Services are available worldwide. We are based in India, and information may be processed and stored in India and in other countries where we or our service providers operate. These countries may have data protection laws different from those in your country. Where required, we use appropriate safeguards for cross-border transfers.

India

We process personal data in accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000 and the rules made under them. You have the right to access information about your personal data, request correction and erasure, nominate another person to exercise your rights in the event of death or incapacity, and seek grievance redressal. See Section 15 for our grievance contact.

European Economic Area, United Kingdom and Switzerland (GDPR)

Where the GDPR applies, our legal bases for processing are: performance of a contract with you; our legitimate interests (such as securing and improving the Services); compliance with legal obligations; and your consent, where required (for example for non-essential cookies and marketing). You have the right to access, rectify, erase, restrict or object to processing, to data portability, and to withdraw consent at any time. You may also lodge a complaint with your local data protection authority.

California and other US states (CCPA/CPRA and similar laws)

If you are a resident of California or another US state with a privacy law, you may have the right to know what personal information we collect, use and disclose; to request access, correction or deletion; and to not be discriminated against for exercising these rights. We do not sell or share personal information for cross-context behavioural advertising. To make a request, contact hello@dotttme.com.

13. Children's privacy

The Services are designed for businesses and professionals and are not directed at children. You must be at least 18 years old to use the Services. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us at hello@dotttme.com and we will delete it.

14. Third-party links and services

The Services may contain links to third-party websites, apps and services, including content created by our Users. We do not control and are not responsible for their privacy practices. We encourage you to read their privacy policies.

15. Contact us and grievance redressal

If you have questions, concerns or requests relating to this Privacy Policy or your personal data, contact:

Social Cloud Ventures Private Limited
Attn: Privacy / Grievance Officer
Metro Pillar Number 133, K 426, 427, Mehrauli-Gurgaon Rd, Ghitorni, New Delhi, Delhi 110030, India
Email: hello@dotttme.com

We will acknowledge and aim to resolve grievances within the timeframes required by applicable law.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you through the Services or by email. Your continued use of the Services after the changes take effect means you accept the updated policy.