Privacy policy

Last updated 5 October 2026

This policy covers the Dodo scanner, the Dodo Scan companion app, the Dodo Fill browser extension, the Dodo cloud service (api.getdodo.in), the Dodo Seal app and its hosted service, and this website, all operated by HASHTEE LAB LLP ("Hashtee Lab", "we"). Plain language, on purpose. Dodo is a business tool and is not directed at children under 18.

What we collect

• Account data — your email address, a hashed password (we never store the password itself), and, only if you enable two-factor sign-in, a phone number.
• Documents — the pages you scan or upload (photos and PDF files) and the structured data extracted from them. This is the product: you point Dodo at paper, we turn it into records for you.
• Voice notes — if you use the microphone to describe what to extract, the short recording is sent to our speech-to-text system, transcribed, and discarded; only the transcribed text is kept, as part of your instructions for that scan or profile.
• Device data — identifiers, firmware version and status heartbeats from scanners linked to your account, and, if you enable notifications, a push token identifying your app install (turn it off anytime in Settings).
• Service logs — technical logs (timestamps, request metadata, errors) kept to run and debug the service.
• Crash and error reports — if the app or service hits a problem, a technical report (device model, OS version, error trace — never your documents or password) goes to our error-reporting provider, Sentry, hosted in the United States.

How it is used

Only to provide the service: authenticating you, processing your scans into records, delivering records where you direct them (your app, your webhooks, your storage buckets), and emailing you security codes. We do not sell your data, show ads, or use your documents to train models.

Where it lives

On AWS in Mumbai (ap-south-1): records in a managed database, scan images in private, encrypted-at-rest storage, reachable only over TLS. Document images are sent to a vision-model provider for extraction, and voice notes to our speech-to-text system for transcription; neither retains your data beyond processing. Verification emails are delivered through our email provider.

Retention and deletion

Your records and images are kept for as long as your account exists — they are yours. You can delete any individual record in the app at any time; its extracted data and stored page images are removed permanently and immediately. Deleting your account (in the app: Settings → Delete account, or see account deletion) permanently removes your account, records, images, profiles, webhooks and sink configurations, and releases your scanners; residual copies in encrypted backups age out within 30 days.

Sharing

Records go only where you send them: webhooks you register, storage buckets you configure, spreadsheets you connect, exports you download. If you connect a Google account for the Sheets integration, we store an encrypted credential and use it only to create and write to the spreadsheet Dodo made for you — disconnect it anytime in the app. We disclose data to no one else unless the law requires it.

The browser extension

Dodo Fill is a browser side panel that types a record you already scanned into the form open in front of you. It is deliberately narrow about what it can see.

• The page stays on your machine. Working out which value belongs in which field happens locally, in your browser. The contents of the pages you visit are not sent to us, not logged, and not stored anywhere but your own computer.
• Site access is per site, and you grant it. The extension asks for access to a site the first time you click "Match this page" there — never in advance, never for all sites. Revoke it anytime at chrome://extensions.
• Sign-in uses a scoped session. Linking the browser by scanning a QR with the Dodo app gives it a session token limited to reading your own scan records. It is not your account key, and you can revoke it from the app. The token is sent only to api.getdodo.in.
• Remembered mappings are local. Once you confirm that a value belongs in a field, that mapping is stored on your machine so the next document of the same kind is faster. It never leaves the browser.
• Cloud-assisted mapping is off unless you turn it on. For a form Dodo cannot work out on its own, you can opt in to sending the form's field labels and types — the words printed next to the boxes — to api.getdodo.in for a suggestion. What is typed in those boxes is never sent, and neither is anything else on the page.
• It never submits. Dodo Fill fills fields you have ticked and stops. Pressing Submit is always yours.

Dodo Seal

Dodo Seal is a work app for checking clothing tags and price labels. Your organisation creates your account and decides how the inspection data is used; we run the hosted service on its behalf.

• What it collects — photos of the labels you choose to inspect, what was read from them and the result, the place you picked in the store or warehouse, and your name, username and role; and, if you turn on notifications, a notification token for your phone. It does not use your location, contacts or photo library.
• How it is used — only to check labels and keep the record your organisation asked for. No ads, no analytics, nothing sold.
• Where it goes — stored in India; photos are read by a vision-model provider that does not keep them.
• Retention and deletion — kept while your organisation uses the service. To see or delete your data, ask your organisation's administrator, or write to hello@getdodo.in.

When you write to us

The contact and order forms on this site collect your name, email, and anything else you choose to fill in — company, phone, city, the volume you handle, and your message — together with which page you came from and any campaign tag in the link you followed. We use it for one thing: to reply to you and to keep track of that conversation. It is never sold, never shared with advertisers, and it does not subscribe you to anything. Your IP address is stored only as an irreversible hash, which lets us spot one source flooding the form and tells us nothing about where you are. Ask us to delete an enquiry and it is gone the same day — hello@getdodo.in.

International users

Dodo is operated from India and your data is stored and processed on servers in India (see above). If you use Dodo from another country, your documents and account data are transferred to and handled in India under this policy. Data-rights requests from anywhere are honoured through the contact below.

Your rights & contact

Ask us anytime what we hold about you, ask for a copy, a correction, or deletion: hello@getdodo.in. We answer within 7 days. If this policy changes materially we will note it here and email account holders.