Privacy Policy

Last updated: 2026-05-12

This Privacy Policy describes how we collect, use, and share information when you use our AI-powered email personalization service ("Service"). By using the Service you agree to the practices described here.

Information we collect

Account information: email address, password hash, and (if you sign in with Google) your name, profile photo, and Google account ID.
Sending account credentials: OAuth access and refresh tokens that authorize us to send email on your behalf via Gmail. Stored encrypted at rest in our database.
Campaign content: contact lists you upload, the prompts and personas you define, generated research, drafted emails, and send/reply/unsubscribe activity.
Billing information: handled by Stripe; we do not store full payment card numbers on our servers.
Usage telemetry: request logs, error reports, and aggregate metrics. We do not use third-party analytics that profile end users for advertising.

How we use information

To operate, secure, and improve the Service.
To send research, drafting, and verification requests on your behalf to our infrastructure providers (see Sub-processors).
To send emails through your connected sending account when you explicitly approve them.
To bill you for usage and to communicate service updates.
To comply with legal obligations and to enforce our Terms.

Sharing & disclosure

We do not sell your personal information. We share data only with the sub-processors listed at /legal/sub-processors, each of whom is contractually bound to protect it. Recipient email addresses you upload are used only to perform the tasks you request (research, drafting, sending, verification) and are not used to train any model.

Your rights

You can access, export, or delete your data at any time from Settings → Account. Deleting your account removes all campaigns, contacts, research, drafted emails, and suppression records. We retain billing records for as long as required by applicable tax law.

Data retention

Campaign data: retained until you delete the campaign or your account.
Company research: cached for up to 14 days to reduce cost; cleared on account deletion.
Suppression list (unsubscribes): retained indefinitely to honor opt-outs across campaigns.
Logs: 30 days.

Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted and audited. No system is perfectly secure; promptly report suspected vulnerabilities via the contact below.

Children

The Service is not directed to anyone under 16. We do not knowingly collect data from minors.

Changes

We may update this policy. Material changes will be announced in-app and via email at least 14 days before taking effect.

Contact

Questions or requests: privacy@your-domain.com (replace before launch).