Privacy Policy
Effective date: 13 July 2026
1. Who we are
DeChaos ("we", "us") is operated by Azeast, obrt, Opora 11, 51219 Čavle, Croatia (OIB: 34297850112). For any privacy question or to exercise your rights, contact us at vjakomin@gmail.com. This policy explains how we process personal data when you use DeChaos. For the Gmail™ add-on specifically, see also our Gmail Add-on Privacy Policy.
2. Data we process
Account data: your name, email address, and authentication details. Content you create: tasks, lists, projects, notes, attachments, and messages you submit for processing. Technical data: log and security records such as IP address, device/browser information, and timestamps. Connections: access tokens for services you link (e.g., Google, Microsoft™) to enable the features you request.
3. How and why we use data
We process data to provide and secure the Service: to operate your account, turn your input into tasks, deliver reminders and notifications, enable sharing that you initiate, and protect against abuse. Our legal bases are the performance of our contract with you, your consent (for optional integrations), and our legitimate interest in operating a secure service.
4. AI and third-party processors
To extract task suggestions, the content you submit is sent over an encrypted connection to OpenAI, acting as our processor. Integrations transmit only the relevant data to the respective provider (e.g., Google for Gmail™, Microsoft™ for Outlook™) solely to deliver the requested feature. We do not sell your personal data and do not use it for advertising.
5. Retention
We keep your content for as long as your account is active or as needed to provide the Service. You can review and delete your tasks, attachments, and account at any time; deleting an item also deletes its stored attachments. Technical logs are kept for a limited period for security and legal compliance.
6. Your rights
Subject to applicable law (including the EU GDPR), you have the right to access, rectify, erase, restrict, or object to processing of your data, and the right to data portability. You may withdraw consent for optional integrations at any time, and you may lodge a complaint with your local data-protection authority. To exercise these rights, contact us at the address above.
7. Security
We protect your data with concrete technical and organisational measures: all traffic is encrypted in transit with TLS 1.2+ (HTTPS-only); account passwords are stored as salted bcrypt hashes; API access tokens are stored only as SHA-256 hashes; OAuth tokens for linked services are kept in access-controlled databases and are never exposed to other users or third parties; uploaded attachments are stored outside the public web root and are served only to their owner; production access is restricted to the operator on a need-to-know basis; security-relevant events are logged. In the event of a personal-data breach we will notify the competent supervisory authority within 72 hours and affected users without undue delay, as required by the GDPR. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
8. Google user data — protection, retention and deletion
For the Gmail™ add-on we request only the minimum scopes needed: gmail.addons.current.message.readonly (read-only access to the single message you have open, only when you act) and script.external_request (allows the add-on script to transmit that message to DeChaos over HTTPS; it grants no access to any Google data). Message content is processed transiently to generate a task proposal and is stored only if you confirm; you can delete any resulting task or intake (including its stored attachment) in the app at any time. Google user data is protected by the mechanisms in section 7, is never used for advertising, is never sold, and is not used to train AI/ML models (see our Gmail Add-on Privacy Policy for the full Limited Use and AI/ML disclosures). You can revoke the add-on's access at any time at myaccount.google.com/permissions; upon request to vjakomin@gmail.com we erase all Google-derived data from your account within 30 days.
9. Cookies
We use strictly necessary cookies for session management and security. Any non-essential cookies (e.g., analytics) are used only with your consent where required.
10. Changes to this policy
We may update this policy from time to time. The current version and its effective date are always shown on this page. Material changes will be communicated where reasonable.
Gmail™, Google Workspace™, and Google™ are trademarks of Google LLC. Microsoft™ and Outlook™ are trademarks of the Microsoft group of companies. DeChaos is an independent application and is not affiliated with, endorsed by, or sponsored by Google LLC or Microsoft.