privacy

We store your email, display name, timezone, your product URL and the model we build from it, your constraints, your drafts and your outcomes.

Mailbox OAuth tokens are encrypted at rest with a key we hold outside the database. We request the narrowest scope that can send mail and nothing that reads your inbox beyond the threads we sent.

Row-level security is on for every table holding your data. Another customer's session returns zero rows, and there is a test in the repository that proves it.

PostHog for product analytics and Microsoft clarity for session replay. Neither loads until you accept cookies.

Every surface showing recipient data, contact details or draft message bodies is masked in both tools. We cannot read your drafts in a session replay and neither can they.

we keep raw observations for 24 Months. normalized events derived from them are kept alongside.

contact records are purged 90 Days after an account is disqualified or a workspace is deleted.

More detail, and a removal form, on the company data page.

Settings has a working delete control. It cascades. It is not a support ticket.

You can also download everything we hold about your workspace as JSON before you go.

Supabase (database and auth), Vercel (hosting), Stripe (payments), Resend (product email), PostHog and Microsoft clarity (analytics), and the model providers we route inference through: Anthropic, OpenAI and Google.

Contact enrichment and email verification providers are listed in the app under settings once connected.