Introduction & Corporate Identity
This Privacy Policy applies to the DizitalGini web application, platform, and associated services (“DizitalGini,” “the Platform,” “we,” “our,” or “us”), owned, engineered, and operated by DATAi2i (“Datai2i Technologies”), headquartered at A-HUB, AU North Campus, Andhra University, Visakhapatnam, AP - 530003, India (Corporate inquiries: team@datai2i.com; Data Protection Officer: privacy@dizitalgini.com).
DizitalGini is an enterprise B2B sales outreach and intelligence platform. We provide automated account research, prospect discovery, dual-format cold email copywriting, and outbound dispatch through customer-connected email infrastructure (Google Workspace, Microsoft 365, or custom SMTP)—all operating with mandatory human-in-the-loop review gates prior to transmission.
We treat data security and user privacy as foundational product requirements. This Privacy Policy details our information practices, our compliance with global data protection standards—including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), and the Indian Digital Personal Data Protection Act (DPDP Act 2023)—and our strict adherence to the Google API Services User Data Policy.
2. Google API Services User Data Policy & Limited Use Disclosure
DizitalGini’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Mandatory Affirmative Statement (Google Workspace API User Data Policy)
“The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.”
Mandatory Google Cloud OAuth Verification Disclosures
What Google User Data Is Accessed: Our application will access the data you have provided to us, including your name, email address, profile picture URL, and OAuth authorization tokens to send emails on your behalf. We may collect, or process on behalf of our customers, the following categories of personal data when you use or interact with our products and services: (1) Google identity data (name, email address, avatar); (2) OAuth authentication tokens scoped strictly to https://www.googleapis.com/auth/gmail.send; and (3) Outbound campaign transmission parameters (recipient email address, subject line, approved message body, and send timestamp).
How We Use Google User Data: We will use your data to provide you with the services you requested, specifically delivering your user-reviewed and user-approved B2B sales outreach campaigns, follow-up sequences, and transactional notifications via your connected Google Workspace or Gmail account. We will not sell your data to third parties, but we may share it with our partners who help us provide our services under written Data Processing Agreements.
With Whom We Share, Transfer, or Disclose Google User Data: We do not transfer or disclose your information to third parties for purposes other than the ones provided in this policy and required to deliver the core functionality of DizitalGini.
Data Protection & Security Procedures: Security procedures are in place to protect the confidentiality of your data. We use encryption to protect your information, specifically authenticated AES-256-GCM encryption at rest for all stored Google OAuth tokens and credentials, and TLS 1.3 encryption for all data in transit across public networks.
A. Specific Google User Data Accessed by DizitalGini
When you authenticate or connect a Google account (Google Workspace or personal Gmail) to DizitalGini, our platform requests access strictly to the following minimal data elements:
| Google Scope | Type | Explicit Purpose & Usage |
|---|---|---|
| https://www.googleapis.com/auth/gmail.send | Restricted | Strict write-only permission used exclusively to dispatch outbound campaign emails and follow-up sequences that you have explicitly reviewed, approved, and scheduled from your dashboard. |
| openid | Non-Sensitive | Cryptographically verifies your Google user identity upon sign-in. |
| Non-Sensitive | Identifies your account, maps mailbox ownership, and populates the “From:” header. | |
| profile | Non-Sensitive | Retrieves your display name (used as sender name) and avatar for your dashboard profile. |
- Your private inbox emails or received messages (
gmail.readonlyis never requested); - Existing email threads, historical discussions, or inbox attachments;
- Draft creation, modification, or message deletion (
gmail.modifyis never requested); - Your Google Contacts, Google Drive files, Google Calendar, or other Workspace services.
B. The Four Limited Use Requirements Enforced by DizitalGini
Information received from Google APIs is used strictly to provide customer-facing functionality that is clearly displayed and prominent in the DizitalGini user interface: specifically, delivering outbound B2B campaign messages and scheduled follow-ups that you have authored, reviewed, approved, and initiated.
We do not transfer, disclose, or sell Google user data to external third parties, except: (i) as strictly necessary to execute the outbound email dispatch functionality directed by you via our hosting infrastructure; (ii) to comply with valid legal processes or applicable law; or (iii) as part of a merger, acquisition, or asset sale where the acquiring entity remains bound by this Privacy Policy.
Our policy does NOT allow the use or transfer of Google user data to third parties for reasons other than providing or improving our application’s core user-facing functionality. Specifically, DizitalGini strictly prohibits using or transferring Google user data for any of the following:
No human (including DATAi2i employees and software engineers) is permitted to read or inspect Google user data, except under the following strictly circumscribed situations:
- We have received your affirmative, explicit consent for specific email error diagnostics upon your support ticket;
- It is strictly necessary for cybersecurity purposes, such as investigating abuse, spam violations, or infrastructure integrity;
- It is strictly required to comply with applicable law or a valid court subpoena; or
- The data is aggregated and anonymized for internal system performance and deliverability telemetry.
3. AI & Machine Learning Model Training Exclusion & Self-Hosted Infrastructure
DizitalGini does NOT use customer data obtained through Google Workspace APIs or Gmail to develop, improve, or train generalized or non-personalized artificial intelligence (AI) and/or machine learning (ML) models.
Affirmative Limited Use Compliance Statement
“The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.”
Under the Google Workspace API User Data and Developer Policy, the Limited Use requirements strictly prohibit using, transferring, or selling Google user data—including raw, aggregated, or derived data—to create, train, or improve foundational or generalized machine learning and artificial intelligence models. No personal data, email content, recipient information, or telemetry accessed via Google APIs is ever retained or transferred to train, fine-tune, or benchmark commercial foundation models or shared AI models.
Disclosure of Self-Hosted, Offline AI Infrastructure & Complete Data Isolation
In compliance with Google verification standards regarding self-hosted and offline AI models:
- 100% Self-Hosted & Offline Infrastructure: DizitalGini operates in a strictly self-hosted and offline capacity. All AI/ML models utilized for prospect intelligence and personalized copy drafting are open-weight models (e.g., Qwen architecture) deployed on private, dedicated GPU compute nodes within our own isolated infrastructure.
- Zero Data Transmission to External AI Providers: All AI processing is executed locally within our secure network perimeter. Prompt data and research materials are never transmitted back to external model creators, commercial cloud AI providers (e.g., OpenAI, Anthropic, or public model hubs), or external aggregators via API.
- Absolute Google User Data Isolation: Google Workspace user data (such as OAuth authorization tokens, user profile identity, and email transmission parameters) is processed locally solely for authorized write-only outbound email delivery via the official Gmail REST API (
https://gmail.googleapis.com/gmail/v1/users/me/messages/send). Google user data is never passed to, ingested by, or shared with the self-hosted AI models, internal reverse proxies, or any model provider for training, fine-tuning, or secondary purposes. - Zero Data Retention (ZDR) on Local Gateway: Internal routing through our local LiteLLM gateway strictly enforces local reverse proxying with Zero Data Retention, zero external logging, and zero persistent token caching.
How AI operates within DizitalGini:
Microsoft 365, Custom SMTP & Mailbox Integrations
In addition to Google Workspace, DizitalGini allows users to connect other outbound delivery channels under identical privacy safeguards:
Write-Only Mail.Send Scope
We request strictly the write-only Mail.Send scope via Microsoft Graph. We do not request Mail.Read or inbox access.
AES-256-GCM Vaulting
SMTP credentials and provider App Passwords are encrypted at rest using AES-256-GCM. We advise users to generate dedicated App Passwords that can be revoked in one click.
Information We Collect
We collect personal information directly from you when you register, configure your account, or use DizitalGini:
Your name, work email address, company name, website domain, and hashed password provided upon sign-up or Google OAuth single sign-on.
Encrypted OAuth access/refresh tokens, SMTP hostnames, port numbers, daily sending rate limits, and sender email addresses.
Target industry categories, geographic filters, buyer seniority levels, product descriptions, and company website URLs you submit for lead discovery.
Credit package purchases and consumption logs. Payments are processed by certified PCI-DSS Level 1 payment processors (e.g. Stripe, Razorpay); we never store raw credit card numbers.
How We Use Your Information
We use collected information solely to perform and support the services you initiate:
- B2B Company & Contact Discovery: Researching public corporate web presences to identify prospective B2B organizations matching your target criteria.
- Dual-Format Copywriting: Synthesizing tailored Mini (50–75 words) and Narrative (130–180 words) outreach pitches for your manual inspection and approval.
- Campaign Outreach Dispatch: Delivering your approved outreach messages through your authorized mailbox on your scheduled cadence.
- Account Security & Tenant Isolation: Enforcing strict multi-tenant boundaries, validating authentication sessions, and preventing unauthorized access.
- Credit Ledger Accounting: Settling pay-per-lead credits (4 credits / $1.00 per complete lead journey) with full transaction audit logs.
How We Share & Transfer Information
DizitalGini does not sell, rent, trade, or monetize your personal information or Google user data. We share information only under the following limited conditions:
We share data with third-party technical vendors (cloud hosting, database storage, and transactional infrastructure) strictly as necessary to host and operate the platform. All sub-processors are bound by written Data Processing Agreements (DPAs) requiring equivalent confidentiality and security standards.
We may disclose information if required to do so by applicable law, governmental inquiry, court subpoena, or to protect the safety, rights, or property of DATAi2i, our users, or the public.
In the event of a merger, acquisition, corporate reorganization, or sale of company assets, user data may be transferred to the acquiring entity, who will remain bound by the commitments in this Privacy Policy.
Security & Cryptographic Standards
We implement comprehensive administrative, technical, and physical security measures to protect your credentials and campaign assets:
TLS 1.3 Encryption
All network traffic between client browsers, microservices, and external mail APIs is encrypted using modern TLS 1.3 with HSTS enabled.
AES-256-GCM Vault
OAuth refresh tokens, client secrets, and SMTP passwords are encrypted at rest using AES-256-GCM with internal key rotation.
Strict Row Isolation
Database architecture enforces strict row-level tenant isolation, ensuring zero data contamination between user accounts.
Data Retention & 1-Click Revocation
You retain complete control over your credentials and stored data at all times:
Retention Policy: We store your personal information for a period of time that is consistent with our business purposes. We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law.
Deletion When Expired: When the data retention period expires for a given type of data, we will delete or destroy it permanently.
User Deletion Request Mechanism: You may request for your data to be deleted by clicking “Disconnect” on any connected mailbox in your dashboard (which immediately purges Google OAuth tokens) or by submitting an erasure request to our Data Protection Officer at privacy@dizitalgini.com. Upon receipt of a verified deletion request, all Google user data, credentials, and campaign logs are permanently erased within 48 hours.
You can disconnect any Google Workspace, Microsoft 365, or SMTP mailbox at any time directly from the Mailboxestab in your dashboard. Clicking “Disconnect” immediately:
- Permanently purges and deletes all stored OAuth access tokens and refresh tokens from our database vault;
- Instantly removes the mailbox from active campaign dispatches;
- Halts all queued and automated follow-up sequences.
You may also revoke DizitalGini’s authorization externally at any time via your Google Account Security Dashboard.
Upon account termination or written request submitted to privacy@dizitalgini.com, all user records, campaign drafts, prospect dossiers, and authentication tokens are permanently purged from active production databases within 48 hours and overwritten in rolling backups within 30 days.
Sub-Processors & Infrastructure Providers
To deliver our SaaS services, DizitalGini contracts with the following trusted third-party sub-processors:
| Sub-Processor | Role / Service Provided | Data Location |
|---|---|---|
| DigitalOcean / Hetzner / AWS | Cloud compute, application hosting, and encrypted object storage | United States / European Union / India |
| PostgreSQL (pgvector) | Encrypted relational database & tenant vault storage | Encrypted VPC Clusters |
| Redis (Alpine) | In-memory caching and background job queue execution (BullMQ) | Encrypted VPC Memory |
| Stripe / Razorpay | PCI-DSS Level 1 payment processing and invoicing | United States / India |
Your Privacy Rights (GDPR, CCPA & DPDP)
Regardless of your residency, DizitalGini extends comprehensive data subject rights to all registered users:
Request an export of all lead records, campaign logs, and account metadata in structured JSON/CSV format.
Update or correct inaccurate profile details, sender names, or organization data via your dashboard.
Request complete and irreversible deletion of your account and all associated campaign data.
Revoke OAuth authorization or halt any active campaign sequence instantly with one click.
To exercise any of these rights, email our Data Protection Desk at privacy@dizitalgini.com. Verified requests are acknowledged within 24 hours and fulfilled within 48 hours without fee.
Policy Updates & Notification of Changes
We keep this Privacy Policy current and will actively notify users if we change how our application accesses, uses, stores, or shares Google user data.
- Advance Notification: Any material revisions affecting the collection, processing, or transfer of user data will be announced in advance via a prominent in-app notification in your dashboard and sent via email to your registered account address at least 30 days prior to implementation.
- Affirmative Re-Consent: If any update involves expanding the scope or purpose of Google user data access beyond what you initially authorized, we will require your explicit affirmative consent and re-authorization before applying the new terms.
- Right to Object & Terminate: If you disagree with any modified terms, you retain the immediate right to disconnect your mailboxes, revoke API permissions, and request deletion of your account.
Data Controller & Contact Information
For questions, clarifications, privacy inquiries, or official Google API verification reviews, please contact the developer and data controller:
DATAi2i
Platform: DizitalGini
A-HUB, AU North Campus,
Andhra University, Visakhapatnam,
AP - 530003
https://www.datai2i.com
Privacy & Data Protection: privacy@dizitalgini.com
Security & Abuse Desk: security@datai2i.com
Executive Team: team@datai2i.com
Official Website: https://www.dizitalgini.com