Your privacy,
considered.

1. Who is responsible?

Controller: Moraza Labs, S.L., operator of the Dotto creative content planning service.

NIF: B05755988 (provisional).

Address: Calle Villanueva 20, escalera 1, 3.º C, 28001 Madrid, Spain.

Privacy contact: hello@madebydotto.com.

Website: dotto-lab.onrender.com.

2. Information we process

Depending on how you use Dotto, we may process:

• Contact details and messages you voluntarily provide, such as your name, email address and business information.
• Account, session and authentication data needed to provide secure access.
• Brand and editorial information, website or social profile links, preferences, comments, and content you submit.
• Files you upload or authorize us to use, including visual references, logos, photographs and documents.
• Technical and operational information such as requests, errors and security logs generated by the hosting infrastructure.
• If a Pinterest integration becomes available and you authorize it, the board and Pin information permitted by the access scopes granted to Dotto.

3. Why we use it

We use relevant information to respond to enquiries, operate the service and client workspace, understand a brand's editorial needs, organize materials and inspiration, draft content proposals, enable human review, maintain security, troubleshoot problems and comply with applicable legal requirements. We do not need permission to publish to Pinterest to organize visual references.

4. Legal bases

Where the GDPR applies, processing may rely on steps requested before entering a contract or the performance of a contract; our legitimate interests in operating and protecting Dotto and responding to business enquiries; consent where required, including for optional third-party connections; and legal obligations. The relevant basis depends on the specific activity. You can withdraw consent for optional connections without affecting prior lawful processing.

5. Pinterest and other connected services

If Pinterest access is enabled, Dotto will request only the permissions needed for the selected features, such as reading authorized boards and Pins. References can help you organize inspiration and plan editorial content. Pinterest images and metadata remain subject to Pinterest's terms and the rights of their owners. Connecting Pinterest does not grant Dotto ownership of those materials or permission to reproduce them in published creative work.

You can revoke an authorized connection using Pinterest's account or app settings. If you ask us to disconnect it, we will cease further authorized retrieval and assess deletion of any associated personal data, subject to applicable retention obligations. We do not currently claim that Pinterest account connection is live.

6. AI-assisted processing

Dotto may use AI service providers to assist with research, editorial ideas, drafts and visual concepts, with human review where offered. Content and references supplied to a feature may be sent to the relevant provider to perform the requested task. Avoid submitting sensitive personal information that is not necessary for the service. Dotto does not claim that third-party Pins are licensed for AI training or reuse.

7. Service providers and international transfers

To operate Dotto, information may be processed by technical providers such as Render (hosting), Supabase (database and file storage) and OpenAI (AI-assisted features), and by other providers necessary to run connected functions. Their processing may involve infrastructure outside the European Economic Area. Where applicable, transfers must rely on appropriate safeguards under data-protection law. We do not sell personal information to advertisers.

8. Retention and security

We keep information for as long as reasonably necessary to provide the requested service, manage accounts and enquiries, protect the platform, resolve disputes and meet legal requirements. Retention periods depend on the data and feature. We use access controls and other proportionate safeguards, but no internet service can promise absolute security.

9. Cookies and similar technologies

Dotto may use strictly necessary session cookies or comparable technologies to authenticate users, maintain secure sessions and support site functionality. Any optional analytics or marketing technologies, if introduced, will require appropriate disclosures and consent where the law requires it.

10. Your rights

Depending on applicable law, you may request access, rectification, deletion, restriction, portability or objection to processing of your personal data. You may also withdraw consent where processing is based on consent. Send requests to hello@madebydotto.com. If you are in the EEA, you may lodge a complaint with your competent data-protection authority, including the Spanish Data Protection Agency (AEPD).

11. Updates

We may update this policy as features, providers or legal requirements change. The latest version will appear on this page with an updated date.