Privacy Policy

Last updated: 25 October 2026

DOFIES is an AI newsroom for publishers: it finds news in public sources, writes articles for your website, sends them to your WordPress for your review, shares the published ones on your social pages and shows you how they perform. This policy explains what personal data we handle to do that, and your rights.

1. Who is responsible

DOFIES is run by Veledin Sela (sole proprietorship, trading as DOFIES), Gefyras Papastathi 22, 45332 Ioannina, Greece, VAT number EL176171435. Contact: info@dofies.com.

For your account we are the controller of your data. For the content and data of the publication you manage with DOFIES (your site, articles, photos, connected accounts), we act as your processor, on your instructions: see Data Processing.

2. What we collect

• Account: your name and email address, from “Continue with Google” or an invitation, and your role in each publication.
• Your publication: its domain and what we read from your public website to set it up (name, language, country, categories, logo).
• Connections you make (only when you connect them):
  • WordPress: a WordPress application password, used to create drafts, publish what you approve, upload photos and read your Media Library.
  • Google: a read-only access token for the Search Console site and Google Analytics property you choose, used only to show you your numbers in DOFIES.
  • Facebook and Instagram: access tokens for the Facebook Page you choose and its linked Instagram account, used to post your published articles there and to show you follower counts.
• Content: the articles our writers prepare for you, your edits, approvals and rejection notes, the photos you upload, and the article requests you send.
• Activity and security logs: what was done in your workspace and by whom (for example “article published”), and our server logs (IP address, time, page requested), kept to run and secure the service.
• Payments: when you subscribe, your plan and invoices. Card details go straight to Stripe; we never see or store them.

We do not collect sensitive data, we do not track you across other websites and we do not use advertising cookies.

3. Why we use it (and the legal basis)

• To provide DOFIES to you and your publication: our contract with you (GDPR art. 6(1)(b)).
• To keep it secure and working (logs, backups, preventing abuse): our legitimate interest (art. 6(1)(f)).
• To bill you and keep accounting records: legal obligation (art. 6(1)(c)).
• Service emails (for example, an article waits for your review): our contract with you. We send no marketing emails without your consent.

4. Google user data

When you connect Google, DOFIES asks only for read-only access to Search Console (webmasters.readonly) and Google Analytics (analytics.readonly), plus your email to show which Google account is connected. We use this data only to show your site's search clicks, impressions and visits, per day and per article, inside your DOFIES workspace.

• We never change anything in your Google accounts.
• We do not sell Google user data, use it for advertising, or share it with anyone, except as needed to run this feature or when the law requires it.
• We do not send Google user data to AI models, and we do not use it to develop, improve or train any AI or machine-learning model.
• No person at DOFIES reads it, except with your permission for support, for security, or when the law requires it.
• Disconnect at any time in Settings: we revoke the access with Google and delete the token at once.

DOFIES's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Facebook and Instagram data

When you connect Facebook, you choose which Pages DOFIES may use. We keep the list of those Pages, their linked Instagram accounts and the access tokens Meta gives us. We use them only to post the articles published on your site to the Page and Instagram account you chose, and to show you follower counts. We do not read your personal profile, your messages or anyone else's data. Disconnect at any time in Settings, or see how to delete your data.

6. Who we share it with

We never sell personal data. We use these service providers (sub-processors), each only for what is listed:

When data goes outside the European Economic Area, it is protected by the European Commission's Standard Contractual Clauses or the EU-U.S. Data Privacy Framework. We may also disclose data when the law requires it.

7. How long we keep it

• Account and workspace data: while your account is active, and deleted within 30 days after you close it.
• Connection tokens: until you disconnect, then deleted at once.
• Server logs: up to 90 days. Backups: up to 90 days.
• Invoices: as long as Greek tax law requires.

8. Security

Everything travels over HTTPS. Passwords and tokens for your connections are encrypted (AES-256-GCM) and are never shown again, not even to you. Access to each publication is limited to its members and their roles.

9. Your rights

You can ask to access, correct, delete or export your data, to restrict or object to its use, and to withdraw any consent. Write to info@dofies.com; we answer within one month. You can also complain to the Hellenic Data Protection Authority (dpa.gr) or the authority where you live.

10. Children

DOFIES is a service for businesses and is not meant for anyone under 16.

11. Changes

If we change this policy, we update the date above, and for important changes we tell account owners by email or in the app first.