Privacy Policy
Last updated: October 8, 2026
Doseg is made by Sustav.dev. It is a CRM: a business (our customer) uses it to keep records about the companies and people it works with or hopes to. This policy says what Doseg holds, who is responsible for it, and which other companies touch it.
Who controls what
Each customer has a workspace with its own database. The customer is the controller of everything in its workspace; Sustav.dev processes it on the customer's behalf, to run the service and for nothing else. We don't sell it, share it between workspaces, use it for advertising, or use it to train AI models.
If a business has a record about you in Doseg and you want to see it, correct it or have it deleted, ask that business. We help them do it. If you don't know which business it is, write to [email protected] and we will pass your request to any workspace that holds your email address.
What a workspace holds
- Companies and people: names, job titles, work email addresses and phone numbers, LinkedIn addresses, photos and logos, and the notes the customer's staff write, including personal details a contact has shared with them such as a birthday or a child's name.
- History: calls, meetings, notes, tasks, deals and support tickets.
- Outreach: the emails the customer sends through Doseg, the replies to them, and a list of addresses that must not be emailed again.
- LinkedIn conversations: the invitations and messages the customer's staff send on LinkedIn and the replies they record. They are recorded by hand, by pasting, or, if a staff member uses Beeper, from their own Beeper app (see below).
- Texts and consent to them: the text messages the customer sends and receives through its own Twilio number, and, for each person who agreed to be texted, how and when they agreed and when they opted out.
- Billing records, if the customer uses them: which of its own customers pay for what. Doseg never receives card numbers.
- Accounts: the name, email address and password hash of each of the customer's staff who can sign in.
If you received an email sent through Doseg
The business that emailed you found your address itself, usually on your own website or a public directory, and is responsible for that email. Every such email has an unsubscribe link that works in one click, with no login and no confirmation step. Using it, or replying that you aren't interested, adds your address to that business's do-not-email list before anything else happens, and Doseg checks that list again at the moment of sending. Replies are read by an AI model to sort them (interested, a question, not interested, and so on); a reply that asks to stop is never answered with anything but an acknowledgement.
If you received a text sent through Doseg
Doseg lets a business text only people it has recorded as agreeing to it, one message at a time, from the business's own number. Reply STOP, or say you don't want texts, and the business's record of your consent is withdrawn at once and Doseg will not let it text you again. If you text a business's number first, Doseg records that as your agreement to hear back.
The Chrome sidebar and Beeper
A customer's staff can install the Doseg sidebar in Chrome. While it is open on a LinkedIn or Sales Navigator page, it reads the name, headline, company, location and address shown at the top of that one page and sends them to the customer's workspace, to look the person up or, when the staff member chooses, to save them. It reads nothing while closed, and never reads lists, search results or contact details.
If a staff member also uses Beeper Desktop, the sidebar can send a LinkedIn message they approve through Beeper on their own computer, and it copies messages from conversations with people the customer is already working into the workspace. Messages from anyone else are not copied. Beeper's token stays on that computer; Doseg's servers never connect to Beeper or LinkedIn.
Other companies that touch the data
- Hostinger hosts the application and its databases, and Cloudflare sits in front of it and routes inbound reply email. Both keep standard server logs, including IP addresses.
- Anthropic provides the AI model that sorts replies and drafts simple answers, and, when asked, a LinkedIn message for one person. It receives the text of the reply and the conversation it belongs to, or the customer's product description and that person's name, title, headline, company and recent LinkedIn messages. It does not use that to train models.
- Resend (on Amazon SES) delivers outgoing email and reports bounces and spam complaints back.
- Twilio carries text messages, on the customer's own Twilio account and number. It receives the number and the text of each message.
- Logo and photo lookups: to find a company's logo Doseg sends the company's web domain to a logo service or to the company's own website. To find a person's photo it may send a hash of their email address to Gravatar. A customer can switch both off.
Cookies and tracking
Signing in to a workspace sets one cookie, which keeps you signed in. doseg.app sets no other cookies and runs no analytics or advertising trackers. Emails sent through Doseg contain no tracking pixels. If an email links to a demo page made for the recipient, opening that page is recorded for the business that sent it; what is typed into it is not.
Retention and deletion
A workspace's data is kept while the customer's account is active. A customer can delete any record at any time. When a customer leaves, its database and files are deleted within 30 days, and its backups expire within 30 days after that. Do-not-email lists and opt-outs from texts are the exception inside a workspace: an address stays suppressed so it is not emailed again, and an opt-out is kept so it is honoured.
Security
Each workspace has its own database and its own file storage; there is no shared table of customers' records. Connections are encrypted with TLS. Passwords and access tokens are stored only as hashes. Uploaded files are served only to signed-in members of the workspace they belong to.
Contact
[email protected]. Doseg is a product of Sustav LC, Arizona, USA.