Privacy Policy

This Privacy Policy explains how Conetic ("Conetic", "we", "us") collects, uses, and protects your information when you use our website and application (the "Service"). Conetic is an AI-assisted CRM that helps creators manage brand partnerships from their email inbox. By using the Service, you agree to the practices described here.

Information we collect

Account information

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use this to create and secure your account.

Gmail data (only if you connect Gmail)

Connecting Gmail is optional and requires your explicit consent. If you connect it, we request two Google scopes:

• gmail.readonly — to read email threads so we can detect brand replies, keep your pipeline in sync, and (with your action) learn your writing style from past emails.
• gmail.send — to send outreach and replies on your behalf when you choose to send them.

We access only what is needed to provide these features. We do not sell your email data, and we do not use it for advertising.

Data you provide

Information you enter into the Service — brands, contacts, deals, notes, voice samples, and related content — is stored so we can provide the Service to you.

Usage and technical data

We collect basic technical information needed to operate the Service, such as logs and data required to keep your account secure and functioning.

How we use your information

• To provide and maintain the Service, including your pipeline, sync, and outreach tools.
• To generate AI-assisted drafts in your writing style, at your request.
• To find professional contact information for brands you choose to research.
• To secure your account, prevent abuse, and provide support.

We do not use the content of your emails to train AI models. Our AI provider processes prompts via its API and does not use API content to train its models.

How Google user data is used (Limited Use)

Conetic's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve user-facing features of the Service.
• We do not transfer Google user data to third parties except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users.
• We do not use Google user data for advertising.
• We do not allow humans to read your Google user data unless we have your consent for specific messages, it is necessary for security or to comply with applicable law, or the data has been aggregated and anonymized.

Service providers we share data with

We share data only with the service providers we rely on to operate the Service, and only as needed for them to perform their function:

• Supabase — database, authentication, and hosting of your stored data.
• Google — sign-in and the Gmail API (only if you connect Gmail).
• Anthropic — AI processing for draft generation (prompts are sent via API and are not used to train models).
• Hunter — professional contact discovery for brands you choose to research.
• Vercel — application hosting and delivery.
• Inngest — running background jobs such as email sync.

We do not sell your personal information.

Data retention and deletion

We keep your data while your account is active. If you disconnect Gmail, we delete the stored Google access and refresh tokens for that connection. If you delete your account or request deletion, we remove your personal data, except where we are required to retain it to comply with legal obligations. To request deletion, contact us at the address below.

How we protect your data

Data is encrypted in transit using TLS. Sensitive credentials, including Gmail OAuth tokens, are encrypted at rest using AES-256-GCM. Your data is scoped to your workspace so it is not accessible to other customers.

Your rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data. You can exercise these rights by contacting us. You can also disconnect Gmail or delete your account at any time from within the Service.

Children

The Service is not directed to children under 16, and we do not knowingly collect personal information from them.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above, and significant changes will be communicated where appropriate.

Contact

If you have questions about this policy or your data, contact us at support@conetic.io. See also our Terms of Service.