Integration - Data Controls
Learn how your data is accessed and used when you connect your apps to Doraverse.
How does Doraverse connect to my apps?
Doraverse connects via OAuth using Composio (our SOC 2 integration partner and sub-processor). OAuth lets you grant scoped, revocable access without sharing passwords.
Who is Composio and what do they do with my data?
Composio is the integration platform that brokers OAuth, executes only the actions you request (e.g., read a Slack channel, create a Notion page), and returns results to Doraverse. You can review how Composio collects/uses data in their Privacy Policy.
What data can Doraverse access from connected apps?
We request only the minimum scopes you approve during OAuth (principle of least privilege).
App’s toolkit and common actions via Composio:
Gmail
Connect mailboxes; send/read messages via toolkit actions.
Message metadata, message bodies/attachments you authorize; ability to send if write scope granted.
gmail.readonly
gmail.send
Google Drive
50+ actions (create/delete comments, create shortcuts, etc.).
File/folder metadata; file contents if read scopes enabled; write operations if granted.
drive.readonly
drive.file.picker
Google Docs
Create/read/update documents via toolkit.
Document metadata & content for the docs you authorize.
documents
drive.file
Google Slides
Create/duplicate/update presentations.
Presentation metadata & slide content you authorize.
read.slide
edit.slide
Google Sheets
Read/update spreadsheet ranges, etc.
Sheet metadata, cell values/ranges you authorize.
spreadsheets
drive.file
Google Calendar
Manage/read events.
Calendar lists, events (titles, times, attendees, etc.).
calendar
calendar.events
Google Meet
Connect Meet to coordinate meetings.
Meeting metadata (links, times) as permitted via Meet/Calendar scopes.
meetings.space.crea
calendar.events
Slack
Read channels/messages; post messages if enabled.
Channel list, messages in authorized channels; post capability if write scopes granted.
channels:history
chat:write
Notion
30+ actions; create/update pages & databases via MCP/tools.
Pages, databases, properties you share with the integration; schema metadata.
No string scopes; access is granted by sharing pages/databases to the integration)
HubSpot
Use CRM endpoints based on scopes you configure.
CRM objects you authorize (contacts, companies, deals, etc.).
crm.objects.contacts.write
crm.objects.deals.write
GitHub
800+ actions via MCP; issues, PRs, repos (read/write if enabled).
Repo metadata, issues/PR content; code if repo scope granted; write if requested.
repo
read:org
Outlook
Outlook toolkit; additional scopes for OneDrive/Teams/SharePoint/Excel as needed.
Mail, calendar, files, teams/channels, etc.
Mail.Read, Calendars.Read
📌 Please note: Exact access = scopes you set in Composio's consent screen.
Does Doraverse use my data to train AI models?
No. Content retrieved from connected apps is used to fulfill your requests only and is not used to train generalized models. (For Google connectors, even when “Improve the model for everyone” is ON, connector content isn’t used for training.)
Which AI/model providers process my data?
Depending on the feature, Doraverse may route prompts/context to your chosen model/agent. We share only what’s necessary for the task. You can request our current sub-processor list at [email protected].
Can Doraverse act in my apps without me knowing?
No. Any automated action (e.g., post to Slack, create a Notion page, comment on a GitHub PR) must be explicitly enabled by you per app and appears in your audit log.
How do I disconnect and revoke access?
In Doraverse: Navigate the chat bar → Manage Integrations. Select the app you want to disconnect and click Disconnect. We immediately invalidate the OAuth token.
Last updated