Getting Started
Integration & Data Controls
Learn how your data is accessed and used when you connect your apps to Doraverse.
How does Doraverse connect to my apps?
Doraverse connects via OAuth using Composio (our SOC 2 integration partner and sub-processor). OAuth lets you grant scoped, revocable access without sharing passwords.
Who is Composio and what do they do with my data?
Composio is the integration platform that brokers OAuth, executes only the actions you request (e.g., read a Slack channel, create a Notion page), and returns results to Doraverse. You can review how Composio collects/uses data in their Privacy Policy.
What data can Doraverse access from connected apps?
We request only the minimum scopes you approve during OAuth (principle of least privilege).
App’s toolkit and common actions via Composio:
App | Common actions | Data categories | Example scopes |
|---|---|---|---|
Gmail | Connect mailboxes; send/read messages via toolkit actions. | Message metadata, message bodies/attachments you authorize; ability to send if write scope granted. |
|
Google Drive | 50+ actions (create/delete comments, create shortcuts, etc.). | File/folder metadata; file contents if read scopes enabled; write operations if granted. |
|
Google Docs | Create/read/update documents via toolkit. | Document metadata & content for the docs you authorize. |
|
Google Slides | Create/duplicate/update presentations. | Presentation metadata & slide content you authorize. |
|
📌 Please note: Exact access = scopes you set in Composio's consent screen.
Does Doraverse use my data to train AI models?
No. Content retrieved from connected apps is used to fulfill your requests only and is not used to train generalized models. (For Google connectors, even when “Improve the model for everyone” is ON, connector content isn’t used for training.)
Which AI/model providers process my data?
Depending on the feature, Doraverse may route prompts/context to your chosen model/agent. We share only what’s necessary for the task. You can request our current sub-processor list at support@doraverse.com.
Can Doraverse act in my apps without me knowing?
No. Any automated action (e.g., post to Slack, create a Notion page, comment on a GitHub PR) must be explicitly enabled by you per app and appears in your audit log.
How do I disconnect and revoke access?
In Doraverse: Navigate the chat bar → Manage Integrations. Select the app you want to disconnect and click Disconnect. We immediately invalidate the OAuth token.
Join our Community
Any other questions? Get in touch
