Mailbox Privacy Notice

Your choice to connect

When available, each user can choose to connect their own Gmail, Google Workspace, Outlook or Microsoft 365 mailbox through the provider's consent screen. DoorwayIQ does not ask for or store your provider password. Connecting a mailbox is separate from signing in to DoorwayIQ.

Information accessed and stored

We process mailbox addresses and account identifiers, encrypted access and refresh tokens, connection status, and synchronization information. Inbox and Sent checks can access message participants, dates, subjects, and message and conversation identifiers.

Provider permissions allow broader mailbox access than DoorwayIQ's contact-matching rules. Matching happens after provider access. The integration is designed to import new, one-to-one correspondence from the connection time only when an address uniquely matches an accessible CRM contact. Group messages, ambiguous matches, nonmatching reply-to addresses and historical mail are excluded. Message parsing can transiently process additional MIME information; the integration does not fetch attachment endpoints or save mailbox attachments as CRM documents.

Stored information can include matched correspondence, drafts, signatures, outgoing message text, consent and access records, send status and operational records.

Why we use mailbox information

We use this information to display relevant client correspondence, compose and reply to messages, send user-authorized messages, associate correspondence with contacts, maintain connections, prevent duplicate processing, protect access and investigate failures. This integration is not a bulk-campaign or open-tracking service.

Provider permissions

Google connections request Gmail read-only and send permissions. Microsoft connections use delegated User.Read, Mail.Read, Mail.Send and offline_access permissions for the connecting user, not application-wide mailbox access. Offline access supports continued authorized processing without repeated sign-in. DoorwayIQ does not use this integration to change provider read flags, labels or folders, or delete messages from your provider.

Who can access information

A personal mailbox is private to its connected user; being a Team Leader or Administrator does not by itself grant access to that mailbox. Shared business mailbox access requires an explicit named View or View and Send grant and access to the related CRM contact. Mailbox information is not automatically shared across workspaces.

Recipients receive the contents and addressing information of messages you send. Google or Microsoft, Sites hosting and Supabase process information needed to provide their respective email, application-hosting and database services. Their own terms and privacy policies also apply. We may disclose information when legally required or necessary to address security incidents.

Limits on use and sharing

We do not sell connected mailbox data, use it for advertising, or use it to train general-purpose AI models. Access, transfers and human review are limited to providing consented features, authorized support, security investigations and legal requirements.

DoorwayIQ's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements, and the applicable Google Workspace API User Data and Developer Policy. This statement is not a claim of Google verification or certification.

Security

Controls include HTTPS, encrypted stored mailbox tokens, scoped access checks and MFA for connection management. These controls do not guarantee that every security risk is eliminated and are not a certification of the service.

Disconnecting and revoking access

Disconnecting stops future mailbox processing, cancels queued sending and removes the active stored connection credentials. Previously created backups may still contain earlier encrypted records. You can separately revoke the provider grant in your Google or Microsoft account settings. Disconnecting does not delete messages from your email provider.

Retention and privacy requests

Disconnecting does not automatically erase correspondence already stored in DoorwayIQ. There is currently no automatic mailbox-message purge. Stored correspondence, history, audit records and backups remain retained; this notice does not promise immediate or scheduled deletion.

To request access, correction or deletion, contact info@sellwithtdt.com. We will review the request, verify your authority, consider applicable recordkeeping obligations and legal holds, and explain the outcome and any limits. Do not send passwords, tokens, identity documents or other sensitive credentials with your request.

Changes and contact

We will disclose material changes to this notice and obtain additional consent where required. Contact SmartVentures 360 LLC at the address or email above with questions about this notice.