Effective date: 21 September 2026 · Controller: KARTIM OÜ, Tallinn, Estonia · privacy@dcnow.app
DCnow ("the Service", "we") is a mobile and web application operated by KARTIM OÜ that helps field engineers record data-centre service visits and produce service visit reports (MSVR) for the service provider that dispatched them. This policy explains what data we process, why, and what rights you have. It applies to the DCnow mobile app, the DCnow web interface and the DCnow API.
1. Data we process
Account data – your name, e-mail address, phone number, organisation, role, time zone and (optionally) home address and hourly rates you enter for your own earnings overview.
Google account data – when you sign in with Google we receive your Google user ID, e-mail address and name. If you grant Gmail access we store an encrypted refresh token so the Service can act on your behalf as described in section 2.
Ticket data – dispatch e-mails sent to you by the service provider that dispatches you and the ticket details extracted from them: ticket and appointment numbers, customer, site, address, schedule, scope of work, requester contact details.
Visit data – timestamps you record (depart home, arrive on site, work complete, depart site, arrive home), notes, photographs you take, part numbers and serial numbers, consumables and the generated reports.
Technical data – server logs (IP address, time, request path, user agent) kept for security and troubleshooting.
2. How we use Google user data (Gmail)
DCnow requests the Gmail scopes gmail.readonly and gmail.send. They are used only for the following:
Reading dispatch e-mails. The Service searches your mailbox with a narrow query (messages from the service provider's dispatch address whose subject contains "Dispatched") and reads only those messages to create tickets. We do not read, index or store any other e-mail.
Sending the finished report. When you tap "Send MSVR", the Service sends one e-mail from your account, with the report attached, to the recipients you confirm, as a reply in the original dispatch thread.
Google user data is never used for advertising, never sold, never shared with third parties other than as needed to send the report to the recipients you choose, and never used to train machine-learning models. Humans at KARTIM OÜ do not read your Gmail data except with your explicit permission to resolve a support issue, or where required by law.
DCnow's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
3. Purposes and legal basis
Providing the Service you signed up for (performance of contract, GDPR art. 6(1)(b)).
Reading and sending Gmail messages (your consent given in the Google authorisation screen, art. 6(1)(a) – you can withdraw it at any time, see section 7).
Security, abuse prevention and troubleshooting (legitimate interest, art. 6(1)(f)).
Compliance with legal obligations, such as accounting (art. 6(1)(c)).
4. Sharing
Your visit data and reports are visible to the people you work for inside DCnow: your organisation's administrators and, if your organisation works for a service provider using DCnow, that provider's coordinators. Reports you send by e-mail go to the recipients you confirm. We use the following processors: Google (authentication, Gmail API) and our hosting provider in the European Union. We do not sell personal data.
5. Retention
Ticket, visit and report data is kept for as long as your organisation's account is active and for 7 years afterwards where required by Estonian accounting law, after which it is deleted. Gmail refresh tokens are deleted immediately when you disconnect Google or delete your account. Server logs are kept for 90 days.
6. Security
Data is transmitted over TLS and stored on servers in the EU. Google refresh tokens are stored encrypted at rest. Access is restricted to authenticated users of your organisation according to their role.
7. Your rights and choices
Revoke DCnow's access to your Google account at any time at myaccount.google.com/permissions; the Service then stops reading and sending e-mail immediately.
Access, correct, export or delete your personal data, or object to processing, by e-mailing privacy@dcnow.app. Account deletion removes your profile, Google tokens and photos; reports already delivered to the service provider remain with them.
Lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or your local supervisory authority.
8. Children
DCnow is a professional tool and is not intended for anyone under 18.
9. Changes
We will post any changes on this page and, for material changes, notify you in the app or by e-mail.