Privacy Policy

Effective date: October 31, 2026

1. About Dewdora

Dewdora is operated by Dewdora. We provide a website for product information, guides, affiliate recommendations, and an AI-powered Affiliate Agent that helps authorized users generate, review, schedule, and publish marketing content to connected social media platforms.

For privacy questions or requests, contact us at dewdora.ai@gmail.com.

This Privacy Policy explains what information we collect, how we use it, how it is stored and protected, and when it may be shared with third parties.

2. Information We Collect

Depending on the features you use, we may collect or receive:

Account information: name, email address, login details, and account-related information.
Contact information: information you provide when contacting us or submitting a form.
Website usage information: browser, device, approximate usage information, and analytics or cookie data where those features are enabled.
Affiliate information: affiliate link interactions, referral information, and attribution records.
Content and media: scripts, video files, images, narration text, captions, publishing schedules, comments, and review feedback submitted to or generated through the Affiliate Agent.
Connected account information: account identifiers, channel or Page information, permitted account details, authorization status, and access tokens received when you connect an external platform.

We collect only information reasonably necessary to operate the relevant features, maintain security, and provide our services.

3. Google User Data and YouTube Integration

When you connect a Google account or YouTube channel to Dewdora, you authorize us to access the Google data covered by the permissions displayed during Google's OAuth consent process.

Depending on the permissions granted and the features used, this may include:

YouTube channel identifiers and available channel information.
Video identifiers, titles, descriptions, publication details, and other video metadata available through authorized API methods.
Information necessary to upload videos and associate uploads with your authorized YouTube channel.
OAuth access tokens and refresh tokens required to maintain the authorized connection.

How We Use Google User Data

We use Google user data only to provide the YouTube integration features that you request, including:

Connecting and identifying your authorized YouTube channel.
Uploading videos that you have approved through the Dewdora Affiliate Agent.
Retrieving permitted channel and video information when needed for connected-channel features.
Displaying relevant publishing status, video information, and publishing history inside the application.
Maintaining the connection and handling authorized publishing operations.

We do not use Google user data for unrelated advertising, sell it, or use it to build advertising profiles.

We do not use Google user data to train generalized artificial intelligence or machine-learning models.

How We Share or Disclose Google User Data

We do not sell Google user data or make it available to data brokers, advertising networks, or unrelated third parties.

Google user data may be disclosed or transferred only in the following limited circumstances:

Google and YouTube: Information is exchanged with Google through its authorized APIs when necessary to connect an account, upload content, or retrieve information requested by the user. Videos and associated information are submitted to YouTube according to the publishing settings selected by the authorized user.
Infrastructure and hosting providers: Our hosting and infrastructure providers may process or store information on our behalf to operate the Dewdora application, database, backups, and security infrastructure. Their access is limited to what is necessary to provide those services.
Security and legal obligations: We may disclose information when reasonably necessary to investigate security incidents, prevent abuse, comply with applicable law, or respond to valid legal requests.
User-directed actions: Information may be transferred when you explicitly request or authorize an action that requires the transfer.

We do not share Google API data with OpenAI, ElevenLabs, or other AI content-generation providers for content generation or model training. Those providers may receive the separate scripts, narration text, prompts, or other content submitted for their specific services, as described in the AI and Affiliate Services section below.

We do not permit third parties to use Google user data for their own advertising, marketing, or unrelated purposes.

Google API Limited Use

Our use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements.

Google user data is used only to provide or improve user-facing features that are visible and relevant within Dewdora. We do not sell Google user data, use it for targeted advertising, or transfer it for purposes unrelated to the authorized integration.

Human access to Google user data is restricted. We do not allow employees or contractors to access such data except where access is necessary for security investigations, technical support specifically authorized by the user, or compliance with applicable law.

4. Connected Social Accounts and Authorization

When you connect a social media account, Page, or channel, Dewdora receives the information and permissions authorized through that platform's OAuth process.

We do not receive your social platform password through OAuth.

The Affiliate Agent uses authorized access tokens to perform actions you request, such as retrieving permitted account information and publishing content that has passed the application's approval workflow.

For supported integrations, the backend encrypts stored OAuth tokens. Access to connected account information is restricted to authorized application functions and administrators who need it to operate the service.

You can disconnect an account through the application where that feature is available. You can also revoke authorization through the relevant platform's security or connected-app settings.

When an account is disconnected, we remove or disable the locally stored authorization credentials associated with that connection, subject to technical, legal, backup, and security-retention requirements. Previously published content remains on the external platform unless you remove it there.

5. AI, Voice Generation, and Affiliate Services

Dewdora may integrate with third-party providers to deliver content-generation features.

Depending on the feature you use:

OpenAI: Prompts, product information, scripts, and relevant review feedback may be sent to OpenAI to generate or revise content.
ElevenLabs: Narration text may be sent to ElevenLabs to generate voice audio.
Other providers: Additional integrations may process the specific information required to provide their enabled features.

These content-generation providers are not authorized by Dewdora to receive Google user data or OAuth tokens for unrelated AI processing or model training.

Third-party providers process information under their own terms and privacy policies. Users should review those policies when using the relevant services.

Dewdora may include affiliate links. If you click an affiliate link or purchase or register with a third-party provider, that provider or affiliate network may process information about the interaction under its own privacy policy and tracking practices. Dewdora may receive referral or commission attribution information.

6. Storage, Security, and Data Protection

We use administrative and technical safeguards designed to protect personal information and connected account data against unauthorized access, disclosure, alteration, or loss.

Depending on the information and system involved, these safeguards include:

HTTPS/TLS encryption for information transmitted between users and the application.
Encryption of stored OAuth access and refresh tokens in the backend.
Restricted access to application accounts, databases, and administrative functions.
Authentication and authorization controls for administrative features.
Server-side handling of OAuth credentials rather than exposing client secrets or tokens in public browser code.
Secure configuration practices for application credentials and environment variables.
Limited access to operational logs and publishing records, with credentials and tokens excluded or redacted where supported.
Monitoring and maintenance intended to identify and address security problems.

No internet-connected system can guarantee absolute security. We continually work to maintain and improve the safeguards used to protect information.

7. Retention and Deletion

We retain information only for as long as reasonably necessary for the purposes described in this policy, including:

Operating accounts and connected integrations.
Maintaining content, approval, and publishing history.
Providing support and resolving technical issues.
Preventing abuse and investigating security incidents.
Meeting legal, accounting, and other applicable obligations.

OAuth tokens are retained while an authorized connection is active and are removed or disabled when the connection is disconnected, subject to necessary security and backup processes.

You may contact us to request access to, correction of, or deletion of personal information. Some information may remain in backups or records where retention is legally required or reasonably necessary for security, dispute resolution, or auditing.

8. International Data Transfers

Dewdora and its service providers may process information on servers located in countries other than the country where you live.

Where information is transferred internationally, we take reasonable steps to ensure that it is handled consistently with this Privacy Policy and applicable data protection requirements.

9. Cookies and Analytics

Dewdora may use cookies or similar technologies for essential website functionality, preferences, security, and analytics where enabled.

You can manage cookies through your browser settings. Disabling certain cookies may affect some website features.

10. Your Choices and Rights

Depending on applicable law and the features you use, you may:

Request access to personal information we hold about you.
Request correction of inaccurate information.
Request deletion of eligible personal information.
Disconnect social accounts and revoke platform authorization.
Manage browser cookie settings.
Contact us with questions about how your information is used.

To submit a privacy request, email dewdora.ai@gmail.com. We may need to verify your identity before processing certain requests.

11. Third-Party Websites and Services

Dewdora may link to external websites, social platforms, affiliate providers, and other services. Those services operate independently and have their own privacy policies and terms.

We are not responsible for the privacy practices of third-party websites or services.

12. Children's Privacy

Dewdora is not intended to knowingly collect personal information from children in circumstances where parental consent is required. If you believe a child has provided personal information to us inappropriately, contact us so we can review the request.

13. Changes to This Privacy Policy

We may update this policy when our services, integrations, or data practices change. The updated version and effective date will be published on this page.

If we make a material change to how Google user data is accessed, used, stored, or shared, we will update the relevant disclosures and provide any notices required by applicable policies or law.

14. Contact

For privacy questions, data requests, or concerns about connected accounts:

Dewdora
Email: dewdora.ai@gmail.com
Website: https://dewdora.com
Privacy Policy: https://dewdora.com/privacy-policy

Updated 10/31/2026