Privacy Policy
Last updated: July 30, 2026
Who we are
Dossi ("the Service", "we") is a client-file management platform for mortgage advisors. The service lets an advisor collect, verify, and organize client documents, manage communication and meetings, and produce documents for signature. For privacy inquiries: lior@revgineer.com.
Our role with the data
With respect to end-client (borrower) information, the advisor is the data controller and Dossi acts as a data processor on the advisor’s behalf and under their instructions. The advisor is responsible for obtaining the required client consents. With respect to the advisor’s own account, we are the data controller.
What information we collect
- Advisor account details: business name, email, phone, business details (tax/registration ID), logo.
- Client information entered by the advisor or uploaded by the client: name, phone, transaction type, and documents (pay slips, bank statements, ID, balance reports, and more).
- Operational data: file status, activity, reminders, signature and payment requests.
- Basic technical usage data required to operate and secure the service.
Use of Google data (Drive and Calendar)
If the advisor connects their Google account, we access their Google Drive and Google Calendar to file client documents into a folder the app creates and to sync meetings. We request the narrowest possible scopes: drive.file (access only to files the app creates or that are opened through it — not to your entire Drive), calendar.events and calendar.readonly (managing meetings).
Limited Use. Dossi's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, do not sell it, and use it solely to provide and improve the features you explicitly request.
Where information is stored
Client documents are filed in the advisor’s Google Drive (the data remains in their ownership). Structured data (file records, statuses) is stored in a secure database (Supabase) with record-level access control. Until Drive is connected, documents are stored in our private, secure storage.
Sharing with third parties
We do not sell information. We rely on service providers who process information solely on our behalf and under data-processing agreements: Supabase (storage), Google (Drive/Calendar), Signew (document merge and e-signature), and an invoicing/payment provider (SUMIT) — each only for the function the advisor activates.
Security, retention, and your rights
We apply reasonable security measures (encryption in transit and at rest, permission-based access control). Information is retained for as long as the account is active or as required by law. In accordance with applicable privacy law and its regulations, you may contact us to review, correct, or delete information. Deleting an account results in deletion or return of the information, subject to legal retention obligations.
Changes and contact
We will update this policy from time to time and note the update date. For questions: lior@revgineer.com.