Terms of Service

1. Acceptance of terms

By creating an account, connecting an email provider, or using any part of the Service, you agree to these Terms and to our Privacy Policy. If you do not agree, do not use the Service.

2. Who may use the Service

You must be at least the age of majority in your jurisdiction and able to form a binding contract. If you are using the Service on behalf of a company, you represent that you have authority to bind that entity, and "you" includes that entity.

3. Your account & security

• You are responsible for maintaining the confidentiality of your login and for all activity that occurs under your account.
• Notify us immediately of any unauthorized use or security incident: [email protected].
• We may suspend or terminate accounts for violation of these Terms or misuse.

4. Email & file integrations (Google, Dropbox, OneDrive)

When you connect Gmail or Google Workspace, you authorize Dioveo to access and process data only to provide the features you enable, for example:

• Indexing attachment metadata across your mailbox history to power search;
• Retrieving the attachments you select so you can download them, individually or in bulk;
• Reading selected attachments through native extraction, OCR, or structured field extraction when you request it;
• Enabling secure search, attachment management, and automation workflows (e.g., uploading attachments to Google Drive, Dropbox, or OneDrive).

OAuth tokens for connected providers (e.g., Google, Dropbox, OneDrive) are encrypted at rest; their values are never included in data exports.

Dioveo's use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.

We do not use Google data for advertising or sell personal data.

Human access to Google data is extremely limited, logged, and only for security, abuse prevention, or support at your request.

You can disconnect access at any time in Dioveo settings or directly in your Google Account → Security → Third-party access.

For more details, see our Privacy Policy .

4.1 File storage integrations (Google Drive, Dropbox, OneDrive)

Dioveo allows you to optionally connect third-party file storage services such as Google Drive, Dropbox, and OneDrive to enable workflow actions, including uploading email attachments to folders you select.

When a file storage integration is enabled, Dioveo accesses only the data strictly necessary to perform the requested actions (e.g., listing folders, creating files, or uploading attachments). Dioveo does not access unrelated files or use connected data for advertising purposes.

Access tokens and credentials for all connected providers are securely stored and encrypted at rest. Human access to connected data is highly restricted, logged, and permitted only for security, abuse prevention, or support purposes at your explicit request.

You may revoke access to any file storage integration at any time from Dioveo settings or directly from the provider's account settings.

4.2 AI-assistant integrations

You may connect a compatible AI assistant to Dioveo through the Model Context Protocol (MCP). The assistant receives only the Dioveo permissions you approve and the results of tools it calls on your instruction. Connecting an assistant does not automatically transfer your mailbox or attachments to it.

Dioveo redacts recognized sensitive values from assistant-facing results by default. If you explicitly confirm an unredacted release, you instruct Dioveo to return that content to the connected assistant. You are responsible for the assistant you choose and for ensuring that disclosure is appropriate. Detection and extraction are automated and may be incomplete or inaccurate.

An assistant can prepare a workflow draft, but a draft cannot run until you review and activate it in Dioveo.

5. License & acceptable use

We grant you a limited, non-exclusive, non-transferable license to access and use the Service for your personal or internal business purposes, in accordance with these Terms.

You agree not to:

• copy, modify, reverse engineer, or create derivative works of the Service;
• use the Service to violate laws, send spam, or infringe rights;
• attempt to bypass security or rate limits;
• use the Service to build a competing product.

We may suspend or terminate access for suspected abuse.

6. Content & permissions

You retain any rights you hold in your emails and content. By using the Service, you grant us the rights necessary to operate the features you enable (e.g., to analyze allowed fields, generate indices, surface search results, and perform the downloads and uploads you request). We do not claim ownership of your emails.

7. Automation workflows & control

• Automation workflows run only the rules you configure (e.g., saving new attachments that match your criteria to a connected cloud storage folder). You remain in control.
• You can pause, edit, or delete a workflow at any time from the interface.
• Workflow actions on connected providers (e.g., uploading a file to Google Drive, Dropbox, or OneDrive) may be subject to provider limits and availability.

8. Plans & pricing

We may offer:

• Free Plan with monthly manual-transfer and automatic-save limits, as described on the pricing page ;
• Pro Plan (e.g., $11.99/month or $99/year) with unlimited downloads, up to 10 workflows, and AI document extraction;
• Full Mailbox Export: a one-time $19 purchase (no subscription) that lets you export your mailbox as often as you need for 7 days from purchase, also included in Pro.

Refunds: Subscription payments are non-refundable once made, except where required by law. The permanent Free Plan can be used without subscribing. Pro has no free trial and is billed when you subscribe. Subscriptions can be canceled at any time and remain active until the end of the current billing period.

We may change fees on notice (e.g., via the site or email). Changes take effect in the next billing cycle unless otherwise stated. Taxes may apply.

9. Billing & cancellations

• Subscriptions renew automatically each period until canceled.
• You can cancel at any time from your billing portal; cancellation takes effect at the end of the current period and access continues until then.
• Except where required by law, fees are non-refundable once a period begins. We may, at our discretion, issue goodwill credits.
• On cancellation or account closure, we will handle data under our Retention commitments in the Privacy Policy.

10. Usage limits

Plan limits (e.g., attachment retrievals, workflow/rule counts, search quotas, and AI document extraction) are as described on the pricing page . When you reach a limit, automations may pause; existing results and manual features remain available where indicated.

We may apply rate limits and fair use protections to keep the Service reliable for all users.

11. Third-party services

The Service may interoperate with third parties (e.g., Google, payment processors). Your use of third-party services is governed by their terms and policies. We are not responsible for third-party services.

12. Intellectual property

The Service (including software, UI/UX, workflows, and documentation) is owned by Dioveo and its licensors and is protected by intellectual property laws. No rights are granted except as expressly stated.

Feedback: If you provide ideas or suggestions, you grant Dioveo a perpetual, irrevocable, royalty-free license to use them without restriction.

13. Confidentiality & privacy

We will handle personal data as described in our Privacy Policy . A Data Processing Addendum is incorporated into these Terms for every account; see Section 22.

14. Beta, previews & changes to the Service

From time to time we may offer beta or preview features that are experimental and provided "as is." We may modify, suspend, or discontinue features; where we make material changes to paid features, we'll provide reasonable notice.

15. Disclaimers

The Service is provided "as is" and "as available." To the maximum extent permitted by law, we disclaim all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. We do not warrant that the Service will be uninterrupted or error-free.

OCR, field extraction, classification, redaction, summaries, and other automated outputs can contain omissions or errors. Verify source evidence before relying on output for financial, legal, medical, employment, or other consequential decisions.

16. Limitation of liability

To the maximum extent permitted by law, Dioveo and its affiliates, officers, employees, and suppliers will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, data, or goodwill, arising out of or related to your use of the Service.

Our total liability for any claim will not exceed the amounts you paid to us for the Service in the 12 months preceding the event giving rise to the claim.

Some jurisdictions do not allow certain limitations; in those cases, the limitations apply to the fullest extent permitted.

17. Indemnification

You will defend, indemnify, and hold harmless Dioveo from and against claims, losses, and expenses (including reasonable attorneys' fees) arising from your use of the Service, your breach of these Terms, or your violation of any law or third-party rights.

18. Governing law & disputes

Governing law: France (without regard to conflict-of-laws principles).

Venue: Courts of Paris, France.

If you are a consumer in the EEA or UK, you may bring disputes before your local courts under applicable consumer laws.

19. Export & sanctions

You agree to comply with applicable export control and sanctions laws and not to use the Service in embargoed or restricted countries or for prohibited purposes.

20. Termination

You may stop using the Service at any time. We may suspend or terminate the Service or your access if you violate these Terms, create risk or legal exposure, or if we discontinue the Service. Upon termination, your license ends and Sections that by their nature should survive (e.g., IP, disclaimers, limitations, indemnity) will survive.

21. Changes to these Terms

We may update these Terms from time to time. If changes are material, we'll notify you (e.g., in-app or by email). Continued use after the effective date constitutes acceptance of the new Terms.

22. Data protection roles, and Data Processing Addendum

Dioveo is operated by Opsaflow SAS (Paris, France). For account administration, billing, support, security and, where you consent, analytics, Opsaflow SAS is the controller. For mailbox-derived processing on your documented instructions, including the attachment index, selected contents, extracted text, structured results, semantic embeddings, collections, comparisons, exports and workflows, Opsaflow SAS acts as a processor. The applicable role depends on the purpose and circumstances. Professional customers are responsible for the lawful basis and any special-category condition applicable to their processing. Technical OAuth authorization is not consent on behalf of other people whose data appears in a mailbox. Personal or household exemptions do not remove our own obligations.

The following Data Processing Addendum (DPA) is incorporated into these Terms and applies automatically to every account, without signature. If you need an executed copy for your records, email us and we will provide one.

• Subject matter and duration: processing of mailbox-derived personal data to provide the Service, for as long as your account exists plus the retention periods in the Privacy Policy (including raw extracted text for up to 365 days, backups up to about 30 days, and prepared downloads up to 7 days).
• Data subjects and categories: you, and the people who correspond with you; identification and contact data, message and attachment metadata, and any personal data contained in files you instruct us to transfer, which may include special categories where your mailbox contains them.
• Nature and purpose: indexing attachment metadata; retrieving and extracting selected contents; creating semantic embeddings and processing search queries; storing collections, processing runs, comparisons, and source evidence; preparing spreadsheet exports and original downloads; and delivering permitted results to assistants or destinations you authorize. Workflow drafts require activation before automated processing. Retention and deletion controls are described in the Privacy Policy.
• Instructions: we process only per these Terms and your use of the features, unless required by EU or member state law, in which case we inform you before processing unless that law forbids it. We will inform you if we consider an instruction infringes data protection law.
• Confidentiality and security: personnel access is limited and bound by confidentiality; measures include encryption in transit and at rest for credentials and prepared files, mutually authenticated database connections, EU hosting, and tested erasure. Details in the Privacy Policy.
• Sub-processors: listed in the Privacy Policy, which serves as notice; we update it at least 14 days before adding one, you may object in that window (and may close your account if we cannot resolve the objection), we impose equivalent data protection duties on each sub-processor, and we remain fully liable to you for their performance.
• Assistance: we assist you with data subject requests (self-serve export and deletion are built in) and, taking into account the nature of processing, with your security and notification obligations, and with data protection impact assessments and prior consultation where relevant.
• Breach notice: we notify you without undue delay after becoming aware of a personal data breach affecting your data.
• Deletion and return: at the end of processing, we will delete or return personal data at your choice and delete remaining copies unless applicable law requires retention. Self-service export and deletion tools are available; requests concerning omitted data, failed cleanup, or additional copies can also be made to our privacy contact. Backup copies expire within about 30 days. Deleting Dioveo data does not delete copies already delivered to your own assistant or cloud accounts.
• Audits: we make available the information reasonably necessary to demonstrate these obligations, and permit audits as required by Article 28(3)(h) GDPR.
• Transfers: hosting and databases are in the EU; where a sub-processor processes data outside the EU, transfers rely on an adequacy decision or standard contractual clauses under that sub-processor's data processing agreement (see the Privacy Policy's international transfers section).

23. Contact

Email: [email protected]