1. Information We Collect
We collect the following types of information:
- Account Information: Name, email address, and password when you create an account
- Connected Account Data: OAuth tokens and profile information from connected platforms (Gmail, Facebook, Instagram, WhatsApp)
- Email Data: Email content accessed through Gmail API for the purpose of automated replies (processed in real-time, not stored permanently)
- Usage Data: Platform usage analytics, automation logs, and performance metrics
2. How We Use Your Information
We use your information to:
- Provide and maintain the Service
- Process automated email replies and social media responses
- Generate AI-powered content and replies
- Display analytics and performance dashboards
- Improve and optimize the Service
3. Google API Services - User Data Policy
Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We only access Gmail data necessary to provide automated reply functionality
- We do not use Gmail data for advertising purposes
- We do not sell or transfer Gmail data to third parties
- Email content is processed in real-time and is not stored permanently on our servers
- Users can revoke access at any time by disconnecting their Gmail account
4. Data Storage and Security
We use industry-standard security measures to protect your data:
- OAuth tokens are stored securely in our database
- All data transmission uses HTTPS encryption
- API keys are encrypted using AES-256-GCM
- We use Supabase (PostgreSQL) for secure data storage
5. Third-Party Services
We integrate with the following third-party services:
- Google (Gmail API): For email reading and sending
- Anthropic: Underlying large-language-model provider for AI-generated content and replies
- Supabase: For database storage
- Vercel: For application hosting
6. Data Retention
We retain your data for as long as your account is active. When you delete your account or disconnect a platform, associated tokens and data are removed from our systems.
7. Your Rights
You have the right to:
- Access your personal data
- Delete your account and associated data
- Disconnect any connected platform at any time
- Revoke OAuth permissions through your Google Account settings
- Request a copy of your data
8. Children's Privacy
The Service is not intended for users under the age of 13. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify users of any material changes by posting the new policy on this page.