Privacy Policy
Last updated: October 23, 2026
1. Introduction
DROMOS PRO ("we", "us", or "our") operates the DROMOS PRO platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.
2. Information We Collect
We may collect the following types of information:
- Personal identification information (name, email address, phone number)
- Account credentials
- Google and Microsoft 365 connection data when your organization connects a mailbox to send email and read its inbox (see Sections 8 and 9)
- Usage data and analytics
- Device and browser information
- Location data (when relevant to transportation services)
3. How We Use Your Information
- To provide and maintain our service
- To send operational emails from mailboxes you connect via Google Workspace or Microsoft 365, and to show their inboxes in DROMOS PRO
- To manage your account and provide customer support
- To improve our platform and user experience
- To communicate with you about updates and changes
- To comply with legal obligations
4. Data Sharing
We do not sell your personal data. Google user data is never sold, rented, or shared with data brokers, advertisers, or other third parties for their independent purposes.
We may share information with infrastructure and service providers who assist us in operating our platform (such as hosting and email delivery), subject to confidentiality agreements and only to provide or improve user-facing features. We may also disclose information when required by law or to protect our rights.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. OAuth access and refresh tokens for connected email accounts are stored encrypted at rest. However, no method of transmission over the Internet is 100% secure.
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Object to or restrict processing of your data
- Data portability
- Revoke third-party integrations (such as Google Workspace) at any time
8. Google Workspace & Gmail Integration
If you connect a personal Google account or a Google Workspace organization to DROMOS PRO, we access Google user data only as described in this section. One connection lets DROMOS PRO send email from the mailbox and show its inbox inside DROMOS PRO. For Google Workspace organizations, an administrator grants these permissions for the organization's mailboxes in the Google Admin console.
Who this applies to: mailbox connections are made only by organizations (tour and transport companies) that connect their own business mailboxes in the DROMOS PRO dashboard. If you sign in to DROMOS PRO, the crew app, the passenger portal, or the partners portal with Google, we receive only your basic profile (name, email address, and profile picture) to sign you in. Signing in never gives DROMOS PRO access to your email, and we never read or send email from your account.
Gmail permissions: we request permission to send email (gmail.send) and to read, compose, send, and change email (gmail.modify). We do not request permission to permanently delete email. Deleting an email in DROMOS PRO moves it to the mailbox's trash, where it can be restored.
How we use Google user data: to authenticate and keep your connected mailbox working; to send the operational emails you configure, such as booking confirmations and customer notifications, from your chosen sender address; to show the mailbox's inbox on the DROMOS PRO Email Inbox page, where your team reads emails and their attachments, replies, forwards, sends new emails, marks emails read or unread, and moves emails to the trash, each only when a user asks for it; and to list available Google Workspace mailboxes during organization setup when directory access has been granted.
Storage: emails and attachments are read live from Gmail when a user opens the inbox and are shown only in that user's browser. DROMOS PRO does not store copies of email contents, attachments, or inbox lists in its database or backups. OAuth tokens and connection metadata are stored in our database, with encryption applied to access and refresh tokens, only while the integration is active.
Who can see the inbox: only signed in users of your DROMOS PRO organization whose role includes the email inbox permissions. DROMOS PRO staff do not read your email unless you ask us to for support, it is needed for security, or the law requires it.
Data sharing: Google user data is not sold or used for advertising. It is shared only with subprocessors necessary to operate the service (such as cloud hosting), under contractual confidentiality obligations.
Retention and deletion: when you disconnect a Google integration or delete your DROMOS PRO account, we delete stored OAuth tokens and associated connection records. Email contents are not stored, so there is nothing else to delete. Some operational logs may be retained for a limited period as described in our Data Deletion page.
Limited Use: DROMOS PRO's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve the user-facing email features described above, not for serving ads, determining creditworthiness, or any other purpose. We do not use Gmail data for advertising, marketing lists, or unrelated analytics.
AI and machine learning: we do not use Google user data to develop, improve, or train generalized AI or machine learning models, and we do not transfer it to third-party AI or machine learning services. Inbox contents are not sent to the DROMOS PRO assistant.
Revoking access: you can disconnect Google Workspace or a personal Gmail mailbox in DROMOS PRO settings, request account deletion, or revoke DROMOS PRO's access at https://myaccount.google.com/permissions.
The Google user data we access is:
- Basic Google profile information during sign-in: your Google account ID, email address, and display name
- OAuth access and refresh tokens to send email and read the inbox on your behalf
- The emails of the mailbox's inbox and their conversations, read when a user opens them: senders, recipients, subjects, dates, read state, message bodies, and attachments
- For Google Workspace organization connections: your verified domain, the admin mailbox used to verify the connection, and read-only directory listings of user email addresses and display names to help you select organization mailboxes
9. Microsoft 365 & Outlook Integration
If your organization connects a Microsoft 365 mailbox to DROMOS PRO, we access Microsoft user data only as described in this section. A mailbox owner can connect their own mailbox by signing in, or a Microsoft 365 administrator can approve DROMOS PRO for the organization's mailboxes. One connection lets DROMOS PRO send email from the mailbox and show its inbox inside DROMOS PRO.
Who this applies to: as with Google, mailboxes are connected only by organizations, in the DROMOS PRO dashboard. Signing in to DROMOS PRO, the crew app, the passenger portal, or the partners portal with a Microsoft account never gives DROMOS PRO access to your email.
Microsoft permissions: when a mailbox owner signs in, we request Mail.Send, Mail.ReadWrite, User.Read, and offline_access. When an administrator approves the organization, DROMOS PRO receives Mail.Send and Mail.ReadWrite for the organization's mailboxes and User.Read.All to list them, and it reads only the mailboxes the organization connects. Deleting an email in DROMOS PRO moves it to Deleted Items; we never delete email permanently.
How we use Microsoft user data: to send the operational emails you configure from your chosen sender address; to show the mailbox's inbox on the DROMOS PRO Email Inbox page, where your team reads emails and their attachments, replies, forwards, sends new emails, marks emails read or unread, and moves emails to Deleted Items, each only when a user asks for it; and to list the organization's mailboxes during setup.
Storage and protection: the same rules as for Google apply. Emails and attachments are read live and shown only in the browser of the user who opens them; DROMOS PRO does not store email contents, attachments, or inbox lists. Only signed in users of your organization whose role includes the email inbox permissions can see the inbox, and DROMOS PRO staff do not read your email unless you ask us to for support, it is needed for security, or the law requires it. Microsoft user data is not sold, not used for advertising, not used to train AI or machine learning models, and not sent to the DROMOS PRO assistant. Tokens are stored encrypted and deleted when you disconnect the mailbox.
Revoking access: you can disconnect a Microsoft 365 mailbox or organization in DROMOS PRO settings or request account deletion. A user can also remove DROMOS PRO at https://myapps.microsoft.com, and an administrator can remove it under Enterprise applications in Microsoft Entra.
The Microsoft user data we access is:
- Basic profile of the connected mailbox: name and email address
- For mailboxes connected by signing in: OAuth access and refresh tokens to send email and read the inbox on your behalf; for administrator approved organizations: the organization's tenant ID and the mailboxes it connects
- The emails of the mailbox's inbox and their conversations, read when a user opens them: senders, recipients, subjects, dates, read state, message bodies, and attachments
- For administrator approved organizations: a read-only list of the organization's users (email addresses and display names) to help you pick mailboxes
10. Contact Us
If you have questions about this Privacy Policy, please contact us at info@dromos.pro.