TAMDOT · Last updated: September 3, 2026
Privacy and data policy
This policy describes Tamdot's actual processing: organizing communications, tracking cases, optional document retention and user-controlled AI assistance.
Beta document — bracketed information must be confirmed and the whole document legally reviewed before commercial release.Controller and contact
Controller: [À CONFIRMER : full legal identity of the publisher]. Privacy contact: [À CONFIRMER : dedicated privacy email]. Address: [À CONFIRMER : publisher postal address].
Data and purposes
Tamdot processes account identity, organization, roles, preferences, cases, contacts, deadlines, appointments, notes, support requests and technical logs to provide operational follow-up, secure access and diagnose the service. Applicable legal bases are [À CONFIRMER : contract, legitimate interests and/or consent per processing activity].
Google User Data
With OAuth consent, Tamdot uses openid, email and profile to identify the Google account, plus gmail.readonly to read messages for synchronization, classification, case matching, date extraction and summaries. Tamdot processes Inbox, Sent, Archive and Spam while excluding Trash and Drafts. It requests and uses no permission to send, compose, modify, label, archive, move or delete email.
Gmail storage and attachments
Tamdot stores useful metadata (displayed sender/recipient, subject, date, language, summary and processing state), fingerprints and encrypted provider references. The full body is fetched on demand or processed transiently and is not retained as an email body. Attachment names, formats and sizes may be retained. Binary content is stored only when an administrator explicitly enables retention and selects allowed formats; it then remains tenant-scoped and is not sent to AI. Retention periods: [À CONFIRMER : period for each data and backup category].
Google data sharing and AI
For enabled AI features, bounded context containing the subject, a body excerpt, relevant metadata and case context may be sent to OpenAI as a technical processor to classify, summarize, match a case or prepare a reply. Binary attachments and OAuth tokens are not transferred. OpenAI processing location and safeguards: [À CONFIRMER : region and contractual transfer mechanism]. Google data is not sold, transferred to advertising platforms or data brokers, used for personalized advertising, or used to determine creditworthiness.
Limited Use and human access
Tamdot's use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including the Limited Use requirements. Human access to Google data is limited to documented authorized cases: an explicit user request, security or abuse response, a legal obligation, or maintenance where aggregated/anonymized data is insufficient.
Security, isolation and transfers
Every business request is bound server-side to the active organization. OAuth tokens and sensitive references are encrypted at rest, secrets are not sent to the browser, and logs exclude full email content. Production traffic uses TLS. Host: [À CONFIRMER : hosting provider, address and hosting location]. Complete processor list, locations and transfer safeguards: [À CONFIRMER : processor register].
Retention, export and deletion
A workspace owner can request a JSON export in Settings. The download is authenticated, tenant/requester-bound, not cached and expires after seven days. It excludes secrets, tokens, document bytes and other users' private assistant conversations. A deletion request immediately disables automations and mailbox processing connections, then enters controlled review. Final deletion delay, backup handling and mandatory retention are [À CONFIRMER : retention policy].
Revocation and rights
To disconnect Gmail, open Settings > Integrations > Gmail > Disconnect. You may also revoke Tamdot under Google Account > Security > Connections to third-party apps. Request export or deletion under Settings > Privacy or contact the privacy address above. Applicable access, correction, erasure, restriction, objection and portability rights remain available.
Cookies and analytics
Tamdot uses cookies strictly necessary for session and security. Analytics or non-essential cookies: [À CONFIRMER : none, or the name, purpose, duration and consent mechanism of every tool actually enabled].