Introduction and scope
This Privacy Policy describes how DAT GO ("we," "us," or "our") collects, uses, stores, shares, and protects information when you use the DAT GO browser extension (Chrome and compatible browsers) and when you interact with our backend services that power that extension. By using DAT GO, you agree to this policy. If you do not agree, please do not install or use the extension.
The extension connects to our API at https://api.kmldigital.xyz for authentication, session management, proxy configuration, support contact information, and related features. This policy covers those data flows.
1. Data collection
We collect and process the following categories of information in connection with DAT GO:
- Account and authentication data: When you sign in through the extension, you provide an email address and password. Our servers validate your credentials and issue a session token. We may also receive or assign a device-related identifier (for example, a device fingerprint) to bind your account to an authorized device, as described in our terms of service.
- Session token and local extension state: The extension stores your session token and related data (such as a device fingerprint value) in the browser's extension storage (
chrome.storage.local) so you stay signed in and so we can validate your session periodically. - DAT-related cookies and site data: To open your licensed DAT session, the extension may clear, set, or read cookies and similar data for DAT domains (for example,
*.dat.com) as instructed by our servers. This includes session cookies needed for DAT to function in your browser. - Proxy configuration: When enabled for your account, our API may provide HTTP proxy settings (host, port, and credentials). The extension applies these settings in the browser and may cache proxy parameters locally to supply authentication when the proxy requests it.
- Permissions and feature configuration: Your account may include permission flags (for example, which DAT UI areas are available). The extension receives this configuration from our API and may store it locally to apply restrictions on DAT pages.
- Support contact information: The extension may retrieve support phone or contact details from our API to display in the extension popup. That content is supplied by us; we do not use it to track you beyond displaying support options.
- Technical data on our servers: When the extension calls our API, our servers typically process standard technical information such as IP address, timestamps, request metadata, and security-related logs. We use this to operate the service, prevent abuse, and troubleshoot issues.
We do not use the extension to collect unrelated browsing history across arbitrary websites for advertising. Extension permissions exist to operate DAT sessions, proxying, and account security as described in the Chrome Web Store listing and this policy.
2. How we use your data (handling)
We process the information above for the following purposes:
- To authenticate you and maintain your logged-in session in the extension.
- To enforce subscription, trial, device-binding, and account status (including suspension or ban) as configured on our systems.
- To deliver and refresh DAT session data (cookies and related configuration) and to open DAT in the browser according to your license.
- To configure and authenticate the HTTP proxy when your plan includes proxied access.
- To apply declarative rules and in-page restrictions consistent with your permissions on DAT domains.
- To provide support contact information and respond to inquiries you send us.
- To secure the service, detect fraud or misuse, and comply with applicable law.
3. Storage
On your device: The extension stores items such as your session token, device fingerprint, cached proxy configuration, and permission settings in the browser's extension storage. DAT session cookies are stored by the browser under normal cookie rules for the relevant DAT domains. Data remains on your device until you log out, we invalidate your session, you remove the extension, or you clear extension data through browser settings.
On our servers: We store account records, authentication data (for example, hashed or secured credentials according to our security practices), session and device-binding information, license and permission configuration, and operational logs on systems we or our hosting providers operate. We use industry-standard safeguards including encryption in transit (HTTPS) and access controls. Retention periods are described below.
4. Sharing of data
We do not sell your personal information. We share information only as follows:
- Service providers: We may use trusted third-party vendors (for example, cloud hosting, database, and security providers) who process data on our behalf under contractual obligations consistent with this policy.
- Proxy infrastructure: When proxying is enabled, your browser sends DAT-related traffic through the proxy endpoints we configure. The operator of that infrastructure may process traffic in order to relay it; we configure this solely to deliver the service you subscribed to.
- Legal and safety: We may disclose information if required by law, legal process, or government request, or to protect the rights, safety, and security of our users, our service, or the public.
- With your direction: When you explicitly ask us to share information or when you consent to a specific disclosure.
5. Security
We implement administrative, technical, and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. These include secure transmission (TLS), access limitations for staff and systems, and monitoring for abuse. No method of transmission or storage is completely secure; we encourage you to use a strong password and to keep your device secure.
6. Retention
We retain account and server-side data for as long as your account is active and as needed to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Extension-side tokens and cached configuration persist until logout, session invalidation, or extension removal. Log data may be retained for a limited period for security and operations. When data is no longer needed, we delete or anonymize it in accordance with our internal practices.
7. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, or export personal data we hold about you, to object to or restrict certain processing, or to withdraw consent where processing is consent-based. You may also have the right to lodge a complaint with a supervisory authority. To exercise these rights, contact us using the information below. You can stop collection of extension-side data by logging out, removing the extension, or clearing extension data in your browser settings.
8. International transfers
Our servers and service providers may be located in countries other than your own. Where we transfer personal data across borders, we take steps designed to ensure appropriate safeguards in line with applicable law.
9. Children
DAT GO is not directed at children under 16 (or the minimum age required in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us and we will take steps to delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. We will post the updated policy on this page and change the "Last updated" date. If changes are material, we will provide additional notice as required by law (for example, through the extension, website, or email).
11. Contact us
For questions, concerns, or requests regarding this Privacy Policy or your personal data, contact:
- Email (privacy): privacy@dat-go.com
- Email (general / legal): legal@dat-go.com
Current support phone numbers may also be shown inside the DAT GO extension or on our website; those numbers are loaded from our API and may change without altering this policy's legal contact emails above.