Privacy policy
Last updated 25 October 2026
This policy explains what personal data DOFIES collects through this website and the DOFIES app, why, who it is shared with, and what rights you have. We keep it short and plain on purpose.
1. Who is responsible
DOFIES is run by ΣΕΛΑ ΒΕΛΕΝΤΙΝ (Veledin Sela), a sole proprietorship trading as DOFIES, Gefyras Papastathi 22, 45332 Ioannina, Greece, VAT number EL176171435. Contact: info@dofies.com.
For this website and for your DOFIES account we are the controller of your data. For the content and data of the business or publication you manage with DOFIES (your site, articles, briefs, photos, connected accounts) we act as your processor, on your instructions: see the Data Processing Agreement.
2. On this website
| Data | Why | Legal basis |
|---|---|---|
| Name, email address and message, when you use the contact chat, a form or write to us | To reply to you and to set up your account if you ask for it | Our legitimate interest in answering you, or steps you ask us to take before a contract |
| Your email address, when you subscribe to the blog | To send you the Gazette | Your consent. You can withdraw it at any time |
| Messages you type into the Lou help chat | To answer your questions | Our legitimate interest in helping visitors |
| Technical data such as IP address, browser type and pages requested, kept in our server logs | To deliver the site, keep it secure and fix errors | Our legitimate interest in running a safe website |
| Your cookie choice and display choices (light or night, sound) | To remember what you picked | Necessary for the service you asked for |
We do not ask for payment details, government ID numbers or sensitive data on this website. Please do not send them to us.
3. In the DOFIES app
- Account: your name and email address, from “Continue with Google” or an invitation, and your role in each workspace.
- Your business or publication: its domain and what we read from your public website to set it up (name, language, country, categories, logo).
- Connections you make (only when you connect them):
- WordPress: a WordPress application password, used to create drafts, publish what you approve, upload photos and read your Media Library.
- Google: a read-only access token for the Search Console site and Google Analytics property you choose, used only to show you your numbers in DOFIES.
- Facebook and Instagram: access tokens for the Facebook Page you choose and its linked Instagram account, used to post your published articles there and to show you follower counts.
- Content: the articles, campaign plans and other work the Dofies prepare for you, your edits, approvals and notes, the business brief you fill in, the photos and reports you upload (for example a search terms report), and the requests you send.
- Activity and security logs: what was done in your workspace and by whom (for example “article published”), and our server logs (IP address, time, page requested).
- Payments: when you subscribe, your plan and invoices. Card details go straight to Stripe; we never see or store them.
We do not collect sensitive data, we do not track you across other websites and we do not use advertising cookies.
4. Why we use it and the legal basis
- To provide DOFIES to you and your business: our contract with you (GDPR art. 6(1)(b)).
- To keep it secure and working (logs, backups, preventing abuse): our legitimate interest (art. 6(1)(f)).
- To bill you and keep accounting records: legal obligation (art. 6(1)(c)).
- Service emails (for example, work waits for your approval): our contract with you. We send no marketing emails without your consent.
5. Google user data
When you connect Google, DOFIES asks only for read-only access to Search Console (webmasters.readonly) and Google Analytics (analytics.readonly), plus your email to show which Google account is connected. We use this data only to show your site’s search clicks, impressions and visits, per day and per article, inside your DOFIES workspace.
- We never change anything in your Google accounts.
- We do not sell Google user data, use it for advertising, or share it with anyone, except as needed to run this feature or when the law requires it.
- We do not send Google user data to AI models, and we do not use it to develop, improve or train any AI or machine-learning model.
- We never use Google APIs or Google user data to create AI-generated sexual, intimate or non-consensual intimate imagery (NCII).
- No person at DOFIES reads it, except with your permission for support, for security, or when the law requires it.
- Disconnect at any time in Settings: we revoke the access with Google and delete the token at once.
DOFIES’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
6. Facebook and Instagram data
When you connect Facebook, you choose which Pages DOFIES may use. We keep the list of those Pages, their linked Instagram accounts and the access tokens Meta gives us. We use them only to post the articles published on your site to the Page and Instagram account you chose, and to show you follower counts. We do not read your personal profile, your messages or anyone else’s data. Disconnect at any time in Settings, or see how to delete your data.
7. Analytics, marketing and fonts
The website and the app use Google Analytics (through Google Tag Manager) to count visits and see which pages and steps people use, for example how many who start a free trial finish it. It loads only after you say yes to analytics in the cookie banner; until then nothing is sent to Google. Google Analytics gets your IP address (which it does not store), browser and device details and the pages you open, under a random ID, never your name, email or anything you type. Google processes this for us in the EU and the United States. We run no advertising tools today; if we add them, they will load only after you say yes to marketing, and the cookie policy lists every tool. The site hosts its own fonts, so your browser does not contact Google or another font service when a page loads.
8. Who we share data with
We never sell personal data. We use these service providers (sub-processors), each only for what is listed:
| Provider | Where | What for |
|---|---|---|
| Hetzner Online GmbH | Germany (EU) | Hosting: our servers and database, where all DOFIES data is stored. |
| Anthropic, PBC | United States | AI work: the public news sources, your business brief and the reports you upload, and the work prepared from them. No passwords or Google user data. |
| Google LLC | United States | Sign in with Google; reading your Search Console and Analytics numbers when you connect them; Google Analytics on our website and app, only after a yes to analytics cookies. |
| Meta Platforms Ireland Ltd | Ireland / United States | Posting your published articles to the Facebook Page and Instagram account you connect. |
| Pexels, Unsplash, Pixabay | EU / United States | Free stock photos: only a few words describing the photo needed (for example “hospital corridor”). |
| Stripe Payments Europe Ltd | Ireland | Payments, when you subscribe: card details go to Stripe directly, never to us. |
| Resend, Inc. | United States | Service emails (for example, an article waits for your review), when enabled. |
| Our email provider | EU | Replies to the messages you send us. |
When data goes outside the European Economic Area, it is protected by the European Commission’s Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. We may also disclose data when the law requires it.
9. How long we keep it
- Messages and emails you send us: as long as needed to answer you, and up to 24 months afterwards unless you become a customer.
- Blog subscription: until you unsubscribe. Your cookie choice: up to 12 months.
- Account and workspace data: while your account is active, and deleted within 30 days after you close it.
- Connection tokens: until you disconnect, then deleted at once.
- Server logs: up to 90 days. Backups: up to 90 days.
- Invoices: as long as Greek tax law requires.
10. Security
Everything travels over HTTPS. Passwords and tokens for your connections are encrypted (AES-256-GCM) and are never shown again, not even to you. Access to each workspace is limited to its members and their roles.
11. Your rights
Under the GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, and move it to another service. Where we rely on consent you can withdraw it at any time. Write to info@dofies.com and we will answer within one month.
You can also complain to the Hellenic Data Protection Authority (dpa.gr) or to the data protection authority in your own country.
12. Children
DOFIES is a business service and is not meant for anyone under 16. We do not knowingly collect data from children.
13. Cookies
See the cookie policy. You can change your choice at any time with .
14. Changes
If we change this policy, we will update the date at the top. For important changes we tell account owners by email or in the app first.
Questions? Write to info@dofies.com or use the contact page.