Privacy Policy
This Privacy Policy explains how Doqqly (“Doqqly”, “we”, “us”) collects, uses and protects information when you use our event management platform (the “Service”). We keep the Service and this policy as simple and transparent as we can. If anything is unclear, email us at support@doqqly.com.
Who this applies to
Doqqly is a business-to-business tool used by event and entertainment teams. It applies to the account holders and team members who sign in to a Doqqly workspace, and to the personal data those teams store about their own clients, suppliers and team members within the Service.
Where your team uploads or records information about third parties (for example, a client’s name or a supplier’s email), your team is the data controller for that information and Doqqly acts as a data processor on your behalf.
Information we collect
- Account information — your name, email address and workspace details, created when you sign in with your Google or Microsoft account, or are invited to a workspace.
- Workspace content — the bookings, contacts, suppliers, contracts, invoices, payments, payouts, statuses and messages your team creates inside Doqqly, including financial identifiers such as tax/VAT numbers and billing addresses your team records about its clients.
- Connected-account data — when you connect a Google or Microsoft account, we access your email and calendar data (Gmail and Google Calendar, or Outlook mail and Microsoft 365 Calendar) as described below.
- Billing information — subscription status and plan. Card details are handled directly by our payment provider, Stripe; Doqqly never sees or stores full card numbers.
- Technical data — basic log and device information (such as IP address and browser type) needed to operate and secure the Service.
Google user data (Gmail & Calendar)
When you connect a Google account, Doqqly requests permission to read and send email on your behalf and to read and write calendar events. We use this access solely to provide features you have asked for:
- Gmail — to display email threads related to a booking, and to send emails (such as contracts and enquiry replies) from your own address.
- Calendar — to create and update calendar events for confirmed bookings and rehearsals, and to invite musicians and read their RSVP responses.
Doqqly’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Gmail or Calendar data for advertising, we do not sell it, and we do not use it to train generalised AI/ML models. You can disconnect your Google account at any time from your workspace settings, and you may revoke Doqqly’s access from your Google Account permissions page.
Microsoft account data (Outlook & Calendar)
If you sign in with Microsoft or connect a Microsoft 365 account, Doqqly accesses your Outlook mail and calendar through the Microsoft Graph API, and only to provide the same booking-related email and calendar features described above. We request the minimum permissions needed (reading and sending mail, and reading and writing calendar events), we do not sell this data and do not use it for advertising. You can disconnect your Microsoft account at any time from your workspace settings, and you may revoke Doqqly’s access from your Microsoft account app permissions page.
How we use information
- To provide, maintain and improve the Service.
- To send transactional messages (contracts, enquiry notifications, invites) that you or your team trigger.
- To process subscription billing through Stripe.
- To secure the Service, prevent abuse, and comply with legal obligations.
We do not sell your personal data, and we do not use your workspace content for advertising.
Sub-processors we rely on
We use a small number of trusted providers to run Doqqly. Each only receives the data needed to perform its function:
- Supabase — database, authentication and file storage for your workspace content.
- Vercel — application hosting and delivery.
- Stripe — subscription billing and payment processing.
- Google — for the Gmail and Calendar features you connect.
- Microsoft — for Microsoft sign-in and, if you connect a Microsoft 365 account, the Outlook mail and calendar features (via Microsoft Graph).
- Upstash — rate-limiting for public endpoints, which processes IP addresses to protect the Service from abuse.
Data retention
We retain workspace content for as long as your workspace is active. Deleted records move to a Recycle Bin and are purged on a schedule you control in your workspace settings. If you close your workspace, we delete or anonymise its content within a reasonable period, except where we are required to retain certain records (for example, for tax or legal purposes).
Your team controls the retention of its own financial records within the Service. You are responsible for keeping invoices, receipts and other accounting records for any period required by the laws that apply to you, and for exporting them before you close your workspace.
Security
Data is encrypted in transit. Access to workspace data is isolated per workspace using row-level security, so one team cannot see another team’s data. We restrict internal access to what is needed to operate and support the Service.
Your rights
Depending on your location, you may have rights to access, correct, export or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at support@doqqly.com. If we process data on behalf of your workspace, we will refer such requests to the workspace administrator where appropriate.
International transfers
Our providers may process data in countries outside your own. Where they do, they rely on recognised safeguards (such as Standard Contractual Clauses) to protect your data.
Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the date above and, where appropriate, notify you within the Service.
Contact us
Questions about this policy or your data? Email support@doqqly.com.
This document is provided for transparency and is not legal advice.