Privacy Policy
Effective Date: September 13, 2026 • Last Updated: September 13, 2026
Our Core Privacy Commitment
At Dweetly (accessible at dweetly.com and via our Android mobile app), we treat your business data with utmost confidentiality. We strictly do not sell, rent, or monetize your personal information or lead submissions to data brokers or third-party advertisers.
1 Introduction
This Privacy Policy describes how Dweetly ("we", "us", or "our") collects, uses, processes, and safeguards information when you use our web portal, APIs, headless endpoints, and mobile applications (the "Service").
By creating an account, integrating our form endpoints, or installing the Dweetly mobile app, you acknowledge that you have read and understood the practices described in this Privacy Policy.
2 Information We Collect
We collect only the information necessary to provide real-time lead ingestion, instant audio chimes, and push notifications:
Account Information
Name, email address, optional phone number, country, and cryptographically hashed password when you register or sign in.
Device & Push Tokens
Google Firebase Cloud Messaging (FCM) registration tokens, device model, and OS version to deliver instant synchronous push alerts to your phone.
Inbound Lead Submissions
Data submitted by your website visitors into your Dweetly endpoints (e.g., inquiry name, email, phone number, custom fields, submission timestamp, and submitter IP).
User Preferences
Preferred audio alert chime (e.g., Emergency Bell, Cash Chime), repeat reminder interval timers, and dashboard color theme settings.
3 How We Use Your Information
- Instant Lead Routing: To ingest web inquiries from your forms and display them in your real-time dashboard with zero latency.
- Push & Audio Alerts: To broadcast high-priority FCM notifications and sound triggers to your connected Android devices and browser sessions simultaneously.
- 1-Tap Communication: To enable instant phone dialing, WhatsApp messaging, or email communication with your inbound leads.
- Spam & Abuse Protection: To analyze form submissions with honeypot security checks and rate limiting to prevent fraudulent bot submissions.
- Account Administration: To verify your email, maintain authentication sessions, and manage subscription quotas.
4 Third-Party Sub-Processors
We partner with industry-leading infrastructure providers to deliver our low-latency services:
- Google Firebase (FCM HTTP v1): Used to deliver low-latency native push notifications to Android devices. Governed by Google's Privacy Policy and Developer Terms.
- Google Identity / OAuth: Optional convenience login using your Google Account.
- Hostinger Cloud Infrastructure: Highly secure, ISO-compliant server and database hosting.
None of these providers are authorized to use your data for advertising or any purpose beyond fulfilling Dweetly's operational infrastructure.
5 Data Retention Policy
Inbound lead retention depends on your selected subscription plan:
| Plan Tier | Lead Retention Period | Automatic Deletion |
|---|---|---|
| Free Tier | 7 Days | Purged after 7 days |
| Pro Plan | 30 Days | Purged after 30 days |
| Agency Plan | Lifetime / Custom | Retained until manually deleted by user |
Account & Data Deletion Rights
In full compliance with Google Play Store's Data Safety and Account Deletion Policy and GDPR/CCPA regulations:
- In-App Deletion: You can delete your account directly inside the Dweetly mobile app by navigating to Profile → Danger Zone → Delete Account & All Data.
- Web Portal Deletion: If you have uninstalled the app or prefer web-based deletion, you can permanently delete your account and all associated data at any time via our public portal: dweetly.com/account-deletion.
What gets deleted? All user credentials, forms, dynamic fields, captured lead logs, push notification tokens, active sessions, and subscriptions are permanently wiped from our databases immediately upon confirmation.
7 Data Security & Safeguards
We employ rigorous technical and organizational security measures:
- All data transmitted between your browser, mobile app, and our servers is encrypted using modern TLS/SSL (HTTPS).
- Passwords are hashed using industry-standard Bcrypt.
- Mobile API requests are authenticated via secure Bearer tokens (Laravel Sanctum).
- Automated database backups are encrypted and retained with strict access controls.
8 Children's Privacy
Dweetly is a B2B productivity tool and lead management service. Our service is not directed to children under the age of 13 (or 16 in certain jurisdictions), and we do not knowingly collect personal data from children.
9 Contact Us & Privacy Requests
If you have any questions, concerns, or requests regarding this Privacy Policy or your data, please reach out to our privacy compliance team: