Privacy Policy

What we collect

When you use Dossier (rundossier.com), we collect the following information:

• Account information — email address and password hash when you create an account.
• Search queries — the names and context you provide when generating dossiers.
• Generated dossiers — the output we produce for you, stored so you can revisit them.
• OAuth tokens — encrypted Gmail and Slack tokens used to access your connected services.
• Slack workspace information — workspace ID and name when you install the Slack app.
• Payment information — processed and stored by Stripe. We do not store card numbers.

How we use your data

We use your data solely to provide and improve the Dossier service:

• Generating dossiers based on the names and context you provide.
• Accessing your Gmail (when connected) to surface relationship context relevant to the person you're researching.
• Processing Slack slash commands and delivering dossiers within your workspace.
• Managing your account, credits, and subscriptions.

Data retention

• Email content — analyzed in real-time during dossier generation and never stored. We do not retain copies of your emails.
• Generated dossiers — retained in your account until you delete them or delete your account.
• OAuth tokens — encrypted at rest and deleted when you disconnect a service or delete your account.
• Account data — retained until you request account deletion.

Third-party sharing

We do not sell your data. We share data only with the following categories of service providers, solely to operate the service:

• AI providers — search queries and gathered context are sent to AI APIs (e.g., Anthropic, Google) to generate dossier content.
• Payment processing — Stripe handles all payment and subscription management.
• Infrastructure — we use AWS and Vercel to host the service. Data is encrypted in transit and at rest.

Slack-specific disclosures

The Dossier Slack app requests only the commands OAuth scope. This means:

• We cannot read your messages, channels, or files.
• We only receive data when a user explicitly types the /dossier slash command.
• Dossier responses are sent as ephemeral messages visible only to the user who ran the command.
• Workspace admins can uninstall the app at any time from Slack admin settings.

Your rights

You have the right to:

• Access — request a copy of the data we hold about you.
• Export — download your generated dossiers.
• Deletion — request deletion of your account and all associated data.
• Disconnect — revoke Gmail or Slack access at any time from your account settings.

To exercise any of these rights, email us at support@rundossier.com.

Contact

If you have questions about this privacy policy or how we handle your data, contact us at support@rundossier.com.