1. Introduction
DMC Lounge ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
By using DMC Lounge, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our services.
2. Information We Collect
We may collect different types of information to provide and improve our services:
Personal Information
Name, email address, phone number, company details, and other information you provide directly when creating an account or using our services.
Usage Data
Information about how you use our platform, including IP address, browser type, pages visited, time spent, and other diagnostic data.
Trip & Client Data
Information related to trips, itineraries, client preferences, bookings, and communications you manage through our platform.
Connected Mailbox Data (Gmail & Outlook)
If your agency connects Gmail or Microsoft Outlook, we access and store email message content and metadata from the mailbox you authorize (such as subjects, bodies, sender and recipient addresses, thread identifiers, read/unread state, and labels or folders) solely to provide email features inside DMC Lounge.
3. How We Use Your Information
We use your information to provide, maintain, and improve our services:
- β’To operate and maintain your DMC Lounge account and provide our services
- β’To communicate with you about updates, features, and support
- β’To personalize your experience and improve our platform
- β’To comply with legal obligations and protect against fraud
We do not sell your personal information to third parties.
4. Gmail & Microsoft Outlook Connections
DMC Lounge is a B2B platform for travel agencies. Agencies may optionally connect their own Gmail or Microsoft Outlook (Microsoft 365) mailboxes so client and booking email can be read, replied to, and sent from within the platform instead of switching between separate email clients.
Email connection is optional. Only authenticated agency administrators can start OAuth from Agency Settings β Integrations (for example, Communication Inbox or Booking Inbox). We access a connected mailbox only after you grant permission on the Google or Microsoft consent screen.
What mailbox data we access
Depending on the features you use, we may access and process: email subjects and bodies; sender and recipient addresses; dates and thread identifiers; read/unread and folder or label state; and attachments when you view or send them through DMC Lounge. We do not access your mailbox until you connect it.
How we use mailbox data
We use connected mailbox data only to provide email productivity features for your agency, including to:
- β’Sync inbound messages into your agency workspace
- β’Send, reply to, and draft email from within DMC Lounge
- β’Link messages to clients, bookings, and trips managed on the platform
- β’Update message state (such as read/unread, archive, or spam) so the platform inbox stays consistent with your mailbox
- β’Let authorized team members work from a shared agency inbox
- β’Operate, secure, and troubleshoot the integration (for example, token refresh and sync errors)
Google Gmail
When you connect Gmail, we request the Google OAuth scope https://www.googleapis.com/auth/gmail.modify so we can read and sync inbox messages, send and reply on behalf of the connected mailbox, manage drafts, and apply label changes needed for inbox management. DMC Lounge's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data for advertising, and we do not sell it. You can disconnect Gmail in Agency Settings β Integrations or revoke access at any time in your Google Account security settings.
Microsoft Outlook / Microsoft 365
When you connect Microsoft Outlook or Microsoft 365 mail, we request Microsoft Graph permissions including Mail.ReadWrite and Mail.Send so we can sync, read, send, reply to, and update messages in the connected mailbox. We use this data only to provide the email features described above inside DMC Lounge. We do not use Microsoft user data for advertising, and we do not sell it. You can disconnect Outlook in Agency Settings β Integrations or revoke the DMC Lounge app in your Microsoft account permissions.
How mailbox data is stored and protected
OAuth tokens are stored encrypted on our servers and used only for the agency mailbox that connected them. Synced message data is stored in our tenant-isolated infrastructure for your agency. Access is limited to users authorized under your agency account. We do not share mailbox content with third parties except subprocessors required to host and operate the service (such as cloud infrastructure providers), and never for their own marketing or advertising purposes.
Your choices and disconnect
- β’Connect or disconnect Gmail or Outlook at any time from Agency Settings β Integrations
- β’When you disconnect, we remove stored OAuth tokens and stop accessing your mailbox; previously synced messages may remain until you delete them or close your agency account
- β’You may also revoke DMC Lounge's access directly in your Google or Microsoft account settings
5. Data Security
We implement industry-standard security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes:
- β’Encryption of data in transit and at rest
- β’Regular security audits and penetration testing
- β’Access controls and authentication mechanisms
- β’Employee training on data protection and privacy
6. Your Rights
You have the right to access, correct, or delete your personal information. You may also:
- β’Request a copy of your data
- β’Request correction of inaccurate data
- β’Request deletion of your account and data
- β’Opt-out of marketing communications
8. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
9. Contact Us
If you have questions about this Privacy Policy or our practices, please contact us:
Email: contact@dmclounge.ai
Address: Fredensborgveien 24A, Oslo, Norway