Security and trust at AskDolphin
Encrypted in transit, hosted in the UK and approved by Google for Gmail. Your data stays yours: we don't sell it or train AI on it.
Reviewed by Google and Microsoft
Before AskDolphin can read and send email for you, Google and Microsoft check who we are and how we handle the access.
Google approved AskDolphin's Gmail access after an independent CASA Tier 2 security assessment (TAC Security, May 2026). AskDolphin is also a Microsoft verified publisher.
Google
CASA Tier 2
Gmail access approved after an independent assessment by TAC Security, May 2026
Microsoft
Verified publisher
For the Outlook and Microsoft 365 connection
Find us on the official app stores
Shopify
App Store
The AskDolphin app for Shopify stores. Get AskDolphin on Shopify
Framer
Marketplace
The AskDolphin plugin for Framer sites. Add AskDolphin to Framer
How we protect your data
Encrypted in transit.
All traffic between you, your customers and AskDolphin travels over HTTPS/TLS.
Encrypted files and credentials.
Files you store and the credentials for your connected services are kept encrypted.
Hosted in the United Kingdom.
Our main systems run in the United Kingdom.
Roles and permissions.
Owners and admins decide what each team member can do, including who may use AI tools.
Staff access only when needed.
Our staff open customer content only for support you ask for, for security or when the law requires it.
Privacy and AI, under your control
Recording only after consent.
Sessions are recorded only after the visitor accepts, with form fields and passwords masked.
Sensitive pages never recorded.
Checkout, payment, sign-in and account pages are never recorded.
A person approves every AI request.
Refunds, cancellations and address changes wait in Action Review for your team.
AI email replies off by default.
Automatic AI email replies stay off until you turn them on.
Visitors know when it's AI.
By default, the chat shows when Dolphin AI is answering.
Your data isn't for sale.
We don't sell personal data or use customer data to train AI models.
Report a security issue
- Report
Tell us what you found.
Found something that looks like a security problem? Email privacy@askdolphin.com with what you saw and how to see it again. We look into every report and reply.
- Fix
We fix it, then you share it.
Please keep the details private until we have fixed the issue, so our customers stay protected while we work on it.
- Questions
No system is completely secure.
We keep improving ours as AskDolphin grows. If you have a security question or need more detail for your own review, email us at privacy@askdolphin.com.
Questions about security
Something not answered? Ask us. The legal detail is in our Privacy Policy and Terms and Conditions.
Is AskDolphin secure?
AskDolphin protects your data with encryption in transit, encrypted storage for files and connection credentials, and main systems hosted in the United Kingdom. Google approved our Gmail access after an independent CASA Tier 2 assessment, and AskDolphin is a Microsoft verified publisher. No system is completely secure, so we keep improving ours as we grow.
What access does AskDolphin have to my Gmail or Outlook?
Only what the shared inbox needs: AskDolphin shows the emails from the mailbox you connect, sends the replies your team writes and, if you turn them on, drafts or sends AI replies. You can remove our access at any time in AskDolphin or in your Google or Microsoft account.
Was AskDolphin's Gmail integration reviewed by Google?
Yes. Google approved AskDolphin's Gmail access after an independent CASA Tier 2 security assessment by TAC Security in May 2026.
Is my data used to train AI models?
No. We don't use your data or your customers' data to train AI models, and under our AI providers' business terms it isn't used to train their models by default.
Can I control what AskDolphin's AI says and does?
Yes. Dolphin AI by AskDolphin answers from the knowledge you approve and replies only where you switch it on, and automatic email replies stay off until you turn them on. Requests such as refunds and cancellations go to Action Review, where a person on your team decides.
How does AskDolphin approach GDPR?
We build on UK and EU data protection law. When we handle your customers' data, we act on your instructions as your processor, under the data-processing terms in our Terms. You can ask to see, correct or delete your own data at privacy@askdolphin.com.
Where is my data stored, and who processes it?
Our main systems are hosted in the United Kingdom. Trusted service providers help us run AskDolphin under written contracts, and when data leaves the UK or EU we rely on recognized safeguards such as the EU Standard Contractual Clauses. Customers can ask us for the current list of providers at privacy@askdolphin.com.
How do I report a security issue?
Email privacy@askdolphin.com with what you found and how to see it again. We look into every report and reply.