Privacy policy

Last updated 20 August 2026

This policy covers the Dodo scanner, the Dodo Scan companion app, the Dodo cloud service (api.getdodo.in) and this website, all operated by HASHTEE LAB LLP ("Hashtee Lab", "we"). Plain language, on purpose. Dodo is a business tool and is not directed at children under 18.

What we collect

• Account data — your email address, a hashed password (we never store the password itself), and, only if you enable two-factor sign-in, a phone number.
• Documents — the images you scan and the structured data extracted from them. This is the product: you point Dodo at paper, we turn it into records for you.
• Device data — identifiers, firmware version and status heartbeats from scanners linked to your account, and, if you enable notifications, a push token identifying your app install (turn it off anytime in Settings).
• Service logs — technical logs (timestamps, request metadata, errors) kept to run and debug the service.
• Crash and error reports — if the app or service hits a problem, a technical report (device model, OS version, error trace — never your documents or password) goes to our error-reporting provider, Sentry, hosted in the United States.

How it is used

Only to provide the service: authenticating you, processing your scans into records, delivering records where you direct them (your app, your webhooks, your storage buckets), and emailing you security codes. We do not sell your data, show ads, or use your documents to train models.

Where it lives

On AWS in Mumbai (ap-south-1): records in a managed database, scan images in private, encrypted-at-rest storage, reachable only over TLS. Document images are sent to a vision-model provider for extraction and are not retained by it beyond processing. Verification emails are delivered through our email provider.

Retention and deletion

Your records and images are kept for as long as your account exists — they are yours. Deleting your account (in the app: Settings → Delete account, or see account deletion) permanently removes your account, records, images, profiles, webhooks and sink configurations, and releases your scanners; residual copies in encrypted backups age out within 30 days.

Sharing

Records go only where you send them: webhooks you register, storage buckets you configure, spreadsheets you connect, exports you download. If you connect a Google account for the Sheets integration, we store an encrypted credential and use it only to create and write to the spreadsheet Dodo made for you — disconnect it anytime in the app. We disclose data to no one else unless the law requires it.

Your rights & contact

Ask us anytime what we hold about you, ask for a copy, a correction, or deletion: hello@getdodo.in. We answer within 7 days. If this policy changes materially we will note it here and email account holders.