Privacy Policy

At S-DCM we fully respect your privacy. The S-DCM application, website, AI Agent, and SaaS dashboard collect information you voluntarily provide, such as name, email, phone number, company, billing information, subscription status, website domain, widget settings, branding preferences, chat transcripts, and knowledge base documents.

Google User Data: When you choose to use integrated Google features (such as Google Sign-In or connecting Google Sheets as your CRM), S-DCM accesses, collects, and processes specific categories of Google user data strictly to deliver these core features. Please refer to Section 6 and Section 7 for an exhaustive disclosure of how we collect, use, store, share, and protect Google user data in full compliance with Google policies.

The information we collect is used exclusively for:

• •Responding to your inquiries and requests
• •Improving site content and experience
• •Sending relevant information only if you have given your consent
• •Analyzing portfolio performance in an aggregated and anonymous manner
• •Creating and managing user accounts, subscriptions, recurring payments, dashboard access, and AI Agent configuration
• •Connecting client services such as Google Sheets, Google Gemini, n8n, and the widget installed on the client's own website

We implement technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure or destruction.

Data is stored on secure servers and access is restricted only to authorized personnel.

Gemini API keys and integration credentials are stored and processed only to activate the workflow associated with each client. They are not shown in full again in the dashboard.

This site may use cookies to improve browsing, maintain dashboard sessions, validate authentication flows, and remember temporary security states, such as the Google OAuth connection process.

You can configure your browser to reject cookies, although this may affect login, the dashboard, checkout, or some site features. We do not use third-party tracking cookies for advertising purposes.

The S-DCM platform allows users to authenticate using Google OAuth and connect their Google Sheets account as a CRM system to receive leads and contact information captured in real time by their AI Agent.

Bring Your Own Key (BYOK) Model: S-DCM allows clients to provide their own Google AI Studio (Gemini) API key. This key is validated directly against Google servers and is used exclusively within the client's environment to process agent queries.

RAG Knowledge Base: Documents (such as PDFs) uploaded by the client are processed using Retrieval-Augmented Generation (RAG) to accurately answer visitor inquiries regarding the client's business.

The S-DCM application accesses specific categories of Google User Data only with your express consent and strictly for the functionalities specified below:

• •Identity and Profile (Scopes: openid, https://www.googleapis.com/auth/userinfo.email, https://www.googleapis.com/auth/userinfo.profile): We collect your full name, primary email address, profile photo, and unique Google account ID. PURPOSE: Used exclusively to securely authenticate your identity, create and manage your S-DCM account, and deliver transactional service notifications.
• •Google Sheets (Scope: https://www.googleapis.com/auth/spreadsheets): We access the specific Google Spreadsheet you select or create from your dashboard for your CRM. We collect column header names and write rows of contact data. PURPOSE: Used to read header rows (to dynamically map fields like Name, Email, Phone, Inquiry) and automatically insert/update lead records captured by your website AI Agent. S-DCM does not access any spreadsheets other than the one you explicitly link. The connection to your Google account is made through a secure, Google-approved OAuth app.
• •Specific Google Drive Files (Scope: https://www.googleapis.com/auth/drive.file): A least-privilege permission that allows S-DCM to create new CRM spreadsheets in your Google Drive and access only files created or explicitly opened with our application. PURPOSE: Used exclusively to initialize the "CRM S-DCM - Leads" spreadsheet in your Google Drive. S-DCM does NOT request and does NOT have access to your full Google Drive, nor to other documents, folders, or files not created by the app.

Mandatory Limited Use Statement: S-DCM's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements. (https://developers.google.com/terms/api-services-user-data-policy).

Strict Artificial Intelligence (AI / ML) Training Prohibition: S-DCM does NOT, under any circumstances, use, transfer, or process user data obtained through Google APIs (including profile data, Google Sheets contents, or Drive file metadata) to develop, improve, fine-tune, or train generalized, foundational, or non-personalized Artificial Intelligence (AI) or Machine Learning (ML) models. / Google user data is not used to develop, improve, or train generalized AI and/or ML models.

No Selling or Commercialization: S-DCM does not sell, rent, lease, or trade Google user data to any third parties or data brokers. Google user data is never transferred to advertising platforms and is never used for targeted, retargeted, or interest-based advertising.

Third-Party Service Providers: Google user data is only transferred to technical infrastructure service providers strictly necessary to operate the service (secure cloud hosting and database systems), who process data strictly under our instructions and subject to confidentiality and security obligations.

Security Procedures: We implement rigorous technical and organizational security mechanisms to safeguard Google user data against unauthorized access, alteration, or disclosure:

• •Encryption in Transit: All data transfers between your browser, Google servers, and our application are encrypted using robust TLS 1.3 / HTTPS protocols.
• •Encryption at Rest: Google OAuth credentials (Access Tokens and Refresh Tokens) are stored encrypted at rest using industry-standard AES-256 encryption.
• •Google-Approved OAuth App: Your Google account is connected through a secure, Google-approved OAuth app.
• •Restricted Human Access: No S-DCM employee or contractor views or reads your Google Spreadsheet contents, except upon your express written request for technical support or as required by law.
• •Retention: Google OAuth tokens are retained only while your CRM integration or user account remains active. Agent conversations are kept for 90 days on base plans and up to 365 days on advanced plans, after which they are automatically purged.

Users maintain full control over their data and can revoke access granted to S-DCM or delete their data at any time via any of the following methods:

• •Direct Google Account Revocation: You can revoke permissions granted to S-DCM at any time via your official Google Account Security page: https://myaccount.google.com/permissions.
• •Disconnection via S-DCM Dashboard: In your CRM dashboard, click "Disconnect Sheets" to immediately revoke and purge all OAuth tokens associated with your account.
• •Full Account Deletion: Via "My Data → Delete my account", all your user data, configurations, database records, and stored credentials are permanently and irreversibly destroyed.
• •Direct Support Request: You may also request manual and immediate deletion of any data by contacting us at [email protected].

For subscriptions and recurring charges, we may process plan data, payment status, email, billing data, and transaction references through payment gateways such as Wompi. S-DCM does not store the full card number or CVC; that data is tokenized by the payment provider.

We may share strictly necessary data with providers that help us operate the service, such as infrastructure, database, transactional email, automation, technical analytics, payment gateways, and Google APIs. These providers act to deliver the service and not to sell your information.

You have the right to know, update, rectify, delete, and revoke your personal data, as well as to access, port it, and request disconnection of integrations, deletion of credentials, opt-out from communications, or account cancellation. To exercise these rights, use the deletion options in section 9 or email [email protected].

We reserve the right to update this privacy policy at any time. Changes will be published on this page with the last updated date.

We collect strictly commercial and public domain contact information (such as business directories or Google Maps) in order to offer our technological services using automated tools.

We only contact businesses on the legal basis of legitimate B2B interest. Any company can request the immediate removal of their contact from our lists and the cancellation of our communications by replying to our messages with the word 'UNSUBSCRIBE' or by writing to our contact email.

If you have questions about this privacy policy, you can contact us at [email protected]. Controller: Santiago De Castro (S-DCM), Colombia.