1. Information We Collect
We collect the information required to create accounts, manage workspaces, operate integrations, and process the content that users choose to connect or upload to Oraculo. This may include first name, last name, email address, phone number, profile picture, business context, Telegram username, authentication data, roles, permissions, and workspace invitations.
- Content sent from Telegram, Slack, Google Meet, or files uploaded by the user.
- Audio, transcriptions, summaries, tasks, decisions, attachments, links, imported messages, and source metadata such as channel, external user, date, thread, or workspace.
- Technical session information, access tokens, IP address, browser user agent, devices registered for web notifications, and error logs.
- Subscription data managed through Stripe, such as customer, checkout session, subscription status, seat quantity, and billing period.
2. How We Use Information
We use information to provide, maintain, and improve Oraculo, including audio transcription, task extraction, file organization, summary generation, semantic search, conversational RAG responses, task boards, reports, activities, permissions, and subscription management.
- Process and convert conversations, meetings, audio, and documents into actionable information.
- Centralize company knowledge and enable search, analysis, audits, and historical tracking.
- Manage workspaces, members, roles, invitations, notifications, and access controls.
- Send operational notices, invitations, product notifications, and relevant service updates.
3. Integrations and External Providers
Oraculo may connect to external services when a user or organization authorizes an integration. These providers process data according to their own policies and the settings enabled by the user.
- Telegram, Slack, and Google Meet to receive or process conversations, files, recordings, and related metadata.
- OpenAI or other artificial intelligence services for transcription, extraction, classification, embeddings, summary generation, and responses.
- Firebase Cloud Messaging to enable web notifications when the user allows them.
- Stripe for checkout, billing portal, customers, subscriptions, and payment events.
4. Disclosure to Third Parties
DSPro does not sell users' personal information. Data may be shared only when necessary to operate Oraculo, comply with legal obligations, protect the security of the service, or execute authorized integrations and providers.
- With members of the same workspace according to configured roles and permissions.
- With technology providers required for authentication, infrastructure, artificial intelligence, notifications, integrations, or billing.
- With competent authorities when a legal obligation applies.
- Through public links voluntarily created by authorized users to share summaries, audio, or tasks outside the application.
5. Information Security
Oraculo applies administrative, technical, and access controls to protect information against loss, misuse, unauthorized access, disclosure, alteration, or destruction. Access to internal features is limited through authentication, roles, permissions, and workspace membership.
6. Data Retention
Data is retained for as long as necessary to fulfill the purposes described in this policy, maintain workspace operational history, meet legal obligations, resolve incidents, audit changes, and support service continuity. When data is no longer needed, it may be deleted, anonymized, or retained only when there is a legitimate basis to do so.
7. User Rights
Users may request access, correction, update, deletion, or objection regarding their personal data, as well as review of information associated with their account or workspace, through DSPro's or Oraculo's official contact channels. Some requests may require identity validation or authorization from the workspace administrator.
8. Changes to This Policy
DSPro may update this policy to reflect legal, technical, or business changes. Updates will be published in this section and will take effect upon publication, unless a different effective date is indicated.
9. Applicable Law
This policy is governed by the laws of the Republic of Costa Rica, without prejudice to other data protection regulations that may apply depending on the location of the user, the organization, or integrated providers.