Privacy Policy — DashMail: Visual Workspaces for Gmail

1. Overview

This Privacy Policy explains how 3G ASESORIA TÉCNICA ESPECIALIZADA ("DashMail," "we," "us," or "our") collects, uses, stores, shares, and protects information in connection with DashMail: Visual Workspaces for Gmail (the "Extension"), the DashMail website, and related subscription and support services (collectively, the "Service").

DashMail is a new productivity extension designed to add a visual organization layer to Gmail. Because the Extension interacts with Gmail, it may process information contained in or associated with your mailbox in order to provide its user-facing features. We designed the Service to minimize the amount of Google user data that leaves the browser and to avoid storing Gmail message content on DashMail-controlled servers.

This Policy should be read together with any just-in-time disclosures presented by the Extension, the Google authorization screen, the Chrome Web Store listing, and our Terms of Service.

2. Who Is Responsible for Your Data

The data controller / responsible party for personal data processed by DashMail is:

3. Google Account and Gmail API Access

DashMail uses Google OAuth 2.0 and the Gmail API to provide its core functionality. The current Gmail scope requested by the Extension is:

Google currently classifies this Gmail scope as a Restricted Scope because it can provide access to Gmail message content or metadata. DashMail requests this scope solely for the features described in this Policy and in the Service.

Why DashMail requests this access

• To read Gmail labels and label-related information used to configure dashboards and tiles.
• To obtain unread counts and message results needed to display dashboard activity.
• To execute user-requested Gmail searches and display the resulting messages or threads.
• To render message content and thread information inside the DashMail interface when you choose to inspect messages.
• To provide navigation and pagination for Gmail messages through the Gmail API.

What the Extension does not request through the Gmail API

• It does not request permission to send or compose Gmail messages.
• It does not request permission to delete Gmail messages.
• It does not request permission to modify message content or labels through a write-capable Gmail scope.
• It does not request permission to manage your Google contacts, payment credentials, or general Google Account settings.

The Gmail API scope does not by itself guarantee how every part of a browser or Google Account behaves. Your use of Gmail remains subject to Google's own terms and policies.

4. Information We Process

4.1 Gmail data processed in the browser

When you use DashMail, the Extension may temporarily retrieve and process Gmail data required for the active feature. Depending on what you view or search for, this can include:

• Gmail labels and related identifiers.
• Unread counts and message metadata such as sender, recipients, subject, dates, thread identifiers, and label information.
• Message content when required to render an email or thread that you open through DashMail.
• Search terms, filters, and results that you explicitly create or request through DashMail.
• Temporary OAuth/session information required to communicate with Google on your behalf.

DashMail is designed to process these Gmail data elements in the browser and not to persist Gmail message content on DashMail-controlled servers.

4.2 DashMail workspace configuration

To provide dashboard persistence and, where enabled, synchronization between devices, DashMail may store configuration data such as:

• Dashboard or board names.
• Tile configuration, including the Gmail label or search definition associated with a tile.
• Selected colors, icons, layout preferences, and refresh preferences.
• Other settings necessary to restore your DashMail workspace.

Workspace configuration is different from Gmail message content. However, a label name, board name, or search definition can contain information that you personally consider sensitive. For that reason, we treat workspace configuration as user-provided data and limit its use to providing the Service.

4.3 Subscription and payment information

Paid subscriptions are processed through Stripe. Stripe may collect and process payment information directly. DashMail does not receive or store your full payment-card number or banking credentials. We may receive and retain limited billing information necessary to administer subscriptions, such as customer or subscription identifiers, plan, status, billing dates, amount, currency, and transaction status.

4.4 Support communications

If you contact us, we may process the information you choose to include in your message, such as your email address, Extension version, device or browser information, screenshots, and a description of the issue. We use this information to respond to you, provide support, maintain security, and improve the Service.

5. How We Use Information

We use information only for purposes connected to providing, securing, maintaining, and improving the Service, including:

• Providing the visual dashboard and message-viewing features you request.
• Keeping your DashMail workspace configuration available where synchronization is enabled.
• Authenticating your session with Google and maintaining the connection needed by the Extension.
• Processing subscriptions, payments, cancellations, and customer support requests.
• Detecting, preventing, and investigating abuse, fraud, security incidents, and technical problems.
• Maintaining the reliability and performance of the Service.
• Complying with applicable legal obligations and enforcing our agreements.

6. Data Storage and Local Processing

DashMail is designed around local browser processing for Gmail data used by the Extension. Gmail message content retrieved through the Gmail API is handled within the browser session needed to provide the requested feature and is not intentionally stored in a DashMail server database.

Temporary data may exist in browser-managed memory or other browser-managed mechanisms used by the Extension while a session is active. We do not represent that browser operating systems, browsers, or Google services provide an absolute guarantee of immediate physical memory erasure.

Where workspace synchronization is enabled, configuration data is transmitted to and stored on infrastructure used to provide that synchronization. The current infrastructure provider is Cloudflare. The configuration synchronized for this purpose is described in Section 4.2.

7. Data Sharing and Third-Party Service Providers

We do not sell, rent, or trade personal information or Google user data. We also do not provide Google user data to advertising networks or data brokers.

We may disclose information when required by applicable law, valid legal process, or to protect the security, rights, or property of DashMail, our users, or others. Any such disclosure will be limited to what is reasonably necessary for the stated purpose.

8. Google User Data — Limited Use Commitment

In particular:

• Google user data is used only to provide or improve user-facing features of DashMail and related operational functions that are permitted by the applicable policy.
• Google user data is not sold, rented, or transferred to third parties for advertising or other unrelated purposes.
• Google user data is not used to serve personalized, interest-based, or retargeted advertising.
• Google user data is not used to train general-purpose or third-party artificial intelligence or machine-learning models.
• Human access to Google user data is not routine. We may access specific data only when permitted and necessary, such as when you expressly consent to specific data for technical support, when necessary for security or abuse investigation, when required by law, or when data has been irreversibly aggregated and anonymized for permitted internal purposes.

9. International Processing and Transfers

Because Google, Cloudflare, Stripe, and other infrastructure providers may operate systems in multiple countries, information may be processed outside the country in which you live. Where required by applicable law, we will use appropriate safeguards for such transfers.

10. Data Retention and Deletion

10.1 Gmail data

DashMail does not maintain a server-side database of your Gmail message content. Gmail data used by the Extension is intended to remain temporary and local to the browser experience. Closing or ending a session normally causes the Extension to release its active in-memory data; however, browser-level caching and system behavior are outside DashMail's complete control.

10.2 Workspace configuration

Workspace configuration stored for synchronization is retained for as long as necessary to provide that feature, unless you request deletion or the configuration is otherwise removed under our retention practices. You may request deletion of synchronized DashMail configuration by contacting contact@asesoria3g.com.

10.3 Billing and support records

Billing, accounting, fraud-prevention, dispute, and support records may be retained for the period required to provide the Service, resolve disputes, comply with legal obligations, and maintain appropriate business records. Stripe may separately retain payment information in accordance with Stripe's policies.

11. Account and Extension Removal

You may stop using DashMail and uninstall the Extension at any time. Uninstalling the Extension stops its use of Gmail through the Extension, subject to any data that may separately remain with Google, Stripe, or another third-party service under that provider's own terms.

Uninstallation does not automatically erase records that we are legally required or otherwise permitted to retain.

Uninstalling the Extension also does not necessarily revoke the Google authorization previously granted to DashMail. You can review or revoke third-party app access through your Google Account settings at any time.

12. Security

We use reasonable technical and organizational measures appropriate to the nature of the information we process. These measures include access controls, secure development practices, encrypted communications in transit, and minimizing the amount of Gmail data stored outside the browser.

No method of storage, processing, or transmission is completely secure. We cannot guarantee that the Service or any third-party infrastructure will never experience an unauthorized access, security incident, or service interruption.

13. Your Privacy Rights

Depending on where you live, you may have rights concerning personal data we process, including rights to access, correct, delete, object to, restrict, or request portability of certain information, subject to applicable legal exceptions.

13.1 Rights under Mexican law, where applicable

Where the Mexican Federal Law on Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) applies, you may exercise the rights of Access, Rectification, Cancellation, and Opposition (ARCO), subject to the conditions and exceptions established by law. Requests may be sent to contact@asesoria3g.com and should include the information reasonably necessary to identify you, describe the right you wish to exercise, and locate the relevant data, together with identity verification materials where legally required.

If applicable law requires a designated privacy officer, address, response period, or additional request procedure, those details will be provided through the full privacy notice or contact process associated with the Service.

14. Children

DashMail is intended for adults and is not directed to children under 18. We do not knowingly design the Service to collect personal information from children for independent use. If you believe a child has provided us with personal information contrary to this Policy, please contact us.

15. Cookies and Website Technologies

The DashMail website may use cookies, local storage, or similar technologies where necessary for site functionality, security, language preferences, payments, or other clearly disclosed website purposes. This Privacy Policy does not assume that the website uses analytics or advertising technologies; any such technology will be disclosed before or when it is introduced.

16. Changes to this Privacy Policy

We may update this Privacy Policy to reflect changes to the Service, our data practices, applicable law, or Google/Chrome requirements. We will update the “Last updated” date when material changes are published. Where required, we will provide additional notice or request consent before implementing a materially different data practice.

17. Contact

Questions, privacy requests, or concerns may be directed to:

External policies referenced by this Privacy Policy:

• Google API Services User Data Policy
• Google Workspace User Data and Developer Policy
• Gmail API scopes
• Chrome Web Store User Data / Limited Use policy