Overview
doohthis, Inc. (“doohthis,” “we,” “us” or “our”) provides software and technology that help businesses in the out-of-home (“OOH”) advertising industry with sales intelligence, inventory intelligence, customer engagement, lead generation, communications, proposals and account management (the “Services”).
This Privacy Policy explains how we collect, use, disclose and protect personal information in connection with our websites, applications, APIs and Services, and describes the rights and choices available to you. It applies to our websites (including doohthis.com), our marketing activities and our platform.
This Privacy Policy does not modify or supersede any separate agreement between doohthis and a customer. Where we process information on behalf of a customer as part of the platform, that processing is governed by the applicable customer agreement and any associated data processing addendum, and the customer, not doohthis, is responsible as the controller of that information.
1. Controller and Scope
For personal information we collect through our websites, marketing, sales and account-administration activities, doohthis is the controller.
For personal information contained in data that a customer or its authorized users submit to, or generate through, the platform (“Customer Data”), the customer is the controller and doohthis acts as a processor or service provider on the customer’s behalf, in accordance with the applicable customer agreement. If you are an individual whose information is processed by doohthis on behalf of a customer, please direct your privacy requests to that customer; we will support the customer’s response as required.
2. Information We Collect
2.1 Information You Provide
- Contact and demo requests. When you request a demo, contact us, subscribe to communications or otherwise interact with us, we collect information such as your name, email address, company, job title and phone number.
- Account information. When an account is created, we collect registration and administrator details, credentials and account settings.
- Inventory and business information. Customers and users may submit OOH inventory records, including board and asset locations, coordinates, attributes, availability and audience-measurement identifiers, as well as pricing, proposals, pipeline and related business information.
- Communications. We collect the content of messages, support requests and other communications you send us.
- Payment information. Payments are processed by third-party payment processors; we receive limited billing and transaction details but do not store full payment-card numbers.
2.2 Information We Collect Automatically
When you access our websites or Services, we and our service providers automatically collect:
- IP address and approximate location derived from it;
- browser type, device identifiers, operating system and device characteristics;
- pages and content viewed, referring and exit pages, and the dates, times and duration of visits;
- feature usage, workflow events, and other product and diagnostic telemetry; and
- information collected through cookies, pixels, scripts and similar technologies (see Section 4 and our Cookie Policy).
2.3 Information From Third Parties and Enrichment Sources
We obtain information about businesses and professionals from third-party data providers, including contact and firmographic data providers, to operate and improve the Services and for our own sales and marketing. This includes business contact details, company information and professional attributes.
Website visitor identification. We use a third-party website-visitor identification technology provided by Apollo.io (“Apollo”) on our websites. This technology identifies the organization associated with a visit and, for certain visitors (currently U.S.-based visitors), may identify the individual visitor and enrich their profile with information from Apollo’s business database, such as name, job title, business email, company and professional details. Section 6 describes this in more detail.
2.4 Call Data and Voice Features
Where a customer enables voice or call-handling features, the Services may process call recordings, audio, transcripts, caller-provided information and call metadata (“Call Data”). Call Data is treated as Customer Data, and the customer is responsible for determining lawful use, providing notices and obtaining any required consents. doohthis processes Call Data on the customer’s behalf in accordance with the applicable customer agreement.
3. How We Use Information
We use personal information to:
- provide, operate, maintain, secure and improve the Services;
- create, administer and support accounts, and respond to requests and communications;
- generate location intelligence, audience and inventory intelligence, sales recommendations and proposals based on inventory and related data;
- personalize and develop features, and understand how the Services are used;
- carry out our own sales, marketing and business-development activities, including identifying and reaching prospective customers (see Section 6);
- detect, investigate and prevent fraud, abuse, security incidents and violations of our terms;
- comply with legal obligations, enforce our agreements, and establish, exercise or defend legal claims; and
- carry out business transactions such as financings, reorganizations or sales of assets.
4. Cookies and Similar Technologies
We and our service providers use cookies, pixels, scripts, local storage and similar technologies to operate our websites, remember preferences, measure performance and analytics, and support the website-visitor identification described in Section 6. For details about the specific technologies we use, the purposes, and how to manage your choices, see our Cookie Policy.
5. Artificial Intelligence and Automated Processing
The Services use automated and artificial-intelligence systems, including third-party model providers, to generate drafts, recommendations, analyses and other outputs. Outputs may be inaccurate or incomplete and are intended to support, not replace, human review.
We do not use a customer’s identifiable inventory data to train general-purpose AI models. Where we generate aggregated, de-identified analytics and insights from use of the Services, we do so in a manner that does not identify a customer, an authorized user or an individual.
6. Website Visitor Identification (Apollo)
To support our sales and marketing, we use Apollo’s website-visitor identification technology on our websites. This technology is consent-gated: it is off by default and operates only after you accept marketing cookies through our cookie banner. When it is enabled and you visit, a script provided by Apollo runs in your browser and sets a first-party cookie, and we and Apollo collect information such as your IP address, device and browser characteristics, and the pages and actions taken on our site.
Using this information together with Apollo’s data, we may:
- identify the organization associated with a visit (for example, by matching network and firmographic signals to a company); and
- identify the individual visitor and enrich their profile with information from Apollo’s business database (such as name, job title, business email, company and professional attributes), currently for U.S.-based visitors.
We use this information to understand who is engaging with our website, to prioritize and inform outreach to prospective business customers, and to improve our marketing. We rely on our legitimate interest in business development for this activity, and, where required, on your consent.
Because this technology is enabled only with your consent, it does not operate unless you have accepted marketing cookies. You can withdraw your consent, or otherwise limit or prevent this identification, by declining non-essential cookies through our cookie controls, using a recognized opt-out preference signal such as Global Privacy Control, or contacting us as described in Section 14. For more information about Apollo’s data practices and your choices, see Apollo’s privacy policy at apollo.io/privacy-policy.
7. How We Disclose Information
We disclose personal information in the following ways:
- Service providers and subprocessors. We share information with vendors that perform services for us, such as cloud hosting and infrastructure, database and authentication (for example, Supabase), analytics (for example, Google Analytics), email delivery (for example, Resend), website-visitor identification and data enrichment (for example, Apollo), payment processing, telephony, and artificial-intelligence model and infrastructure providers. These providers are permitted to use information only to provide services to us.
- Affiliates. We share information with our affiliates and personnel, including our operations in India, for support, engineering, security and business operations.
- Legal and safety. We disclose information where required by law, subpoena or legal process, or where we believe disclosure is necessary to protect rights, safety, our Services, our users or the public, or to prevent fraud or abuse.
- Business transfers. We may disclose information in connection with a financing, merger, acquisition, reorganization, change of control or sale of assets.
- With your direction or consent. We share information as you otherwise direct or authorize.
8. Sale or Sharing of Personal Information
We do not sell personal information for monetary consideration.
However, some of our uses of cookies, analytics and website-visitor identification technologies (including the Apollo technology described in Section 6) may be considered a “sale” or “sharing” of personal information, or processing for “targeted advertising,” under certain U.S. state privacy laws. You may opt out of this activity by declining non-essential cookies through our cookie controls, by using a recognized opt-out preference signal such as Global Privacy Control, or by contacting us as described in Section 14. We do not knowingly sell or share the personal information of individuals under 18.
9. Legal Bases for Processing
Where the laws of the European Economic Area, the United Kingdom or a similar jurisdiction apply, we process personal information on the following legal bases: performance of a contract; our legitimate interests (such as operating, securing and improving the Services and carrying out business development), balanced against your interests and rights; compliance with legal obligations; and your consent, where required (for example, for certain cookies and marketing). Where we rely on consent, you may withdraw it at any time.
10. Data Retention
We retain personal information for as long as necessary to provide the Services, operate our business, and comply with our legal obligations, resolve disputes and enforce our agreements. Inventory and other Customer Data are retained in accordance with the applicable customer agreement and are deleted upon request or account termination, except where retention is required by law or for backup, security, fraud-prevention or dispute-resolution purposes. Retention periods vary depending on the type of information and the purpose for which it is processed.
11. International Transfers
We are based in the United States, and we host and process information in the United States. Information may also be accessed or processed from other jurisdictions, including India, by our affiliates, personnel and subprocessors. Where we transfer personal information across borders, we implement appropriate safeguards as required by applicable law, such as standard contractual clauses.
12. Security
We maintain administrative, technical and organizational safeguards designed to protect personal information appropriate to its nature and the risks involved. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
13. Your Rights and Choices
Depending on where you live and subject to applicable law, you may have the right to:
- access the personal information we hold about you and obtain a copy;
- correct inaccurate personal information;
- delete personal information;
- port your personal information to another provider;
- opt out of marketing communications;
- opt out of the “sale” or “sharing” of personal information and of targeted advertising, and to limit certain automated processing; and
- object to or restrict certain processing, or withdraw consent.
You may exercise these rights by contacting us as described in Section 14. We will respond within the time required by applicable law, generally within thirty (30) days. We will not discriminate against you for exercising your rights. You may also have the right to appeal a decision or to lodge a complaint with a supervisory authority or your state attorney general. If we process your information on behalf of a customer, please direct your request to that customer.
To opt out of marketing emails, use the unsubscribe link in the message. To manage cookies and opt out of website-visitor identification, use our cookie controls or a recognized opt-out preference signal such as Global Privacy Control. To opt out of Google Analytics, you may use the Google Analytics opt-out browser add-on.
14. Contact Us
If you have questions or requests regarding this Privacy Policy or our privacy practices, contact us at:
15. Children
Our websites and Services are intended for business and professional use and are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children under 18.
16. Third-Party Links and Services
Our websites and Services may link to or integrate with third-party websites and services that we do not control. This Privacy Policy does not apply to those third parties, and we encourage you to review their privacy policies.
17. Google User Data
doohthis connects to your Google account only when you choose to link it. We request a single Google OAuth scope: https://www.googleapis.com/auth/gmail.send: permission to send an email message on your behalf.
This scope allows doohthis to send a message you have composed or reviewed and explicitly approved within the Platform. It does not permit, and doohthis does not perform, reading, listing, searching, downloading, or deletion of your mail. We do not access your inbox, message contents, message metadata, labels, drafts, or contacts.
What we store. When you send a message through doohthis, we retain the message identifier returned by the Gmail API together with the recipient address, subject, and send time, so you can see a record of what you sent from within the Platform.
How AI is used. doohthis uses third-party AI services, currently Google’s Gemini API and Perplexity’s Sonar API. No data received from Google Workspace APIs is sent to any AI or machine-learning provider.
Limited Use. doohthis’s use of information received from Google APIs will adhere to the Google API Services User Data Policyincluding the Limited Use requirements. We do not use, transfer, or sell Google user data, whether raw, aggregated, anonymized, or derived, to create, train, or improve any generalized or foundational machine-learning or artificial-intelligence model, and we do not transfer such data to any third party for those purposes.
Revoking access. You can revoke doohthis’s access to your Google account at any time at https://myaccount.google.com/permissions.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we do, we will revise the “Last Updated” date above and, where required by law, provide additional notice. Your continued use of our websites or Services after an update takes effect constitutes acceptance of the revised Privacy Policy.