Privacy Policy

• Account details. When you sign up or sign in, the app stores your account email address and authentication credentials through the app's built-in authentication service. If you sign in with Google, we receive your basic profile fields (name, email, avatar).
• Lead contact information. Leads you import from business card photos, Excel files, Google Sheets, or QR codes — such as names, email addresses, phone numbers, companies, roles, and notes — are stored in your app database and in the Google Sheet ("Master Leads") you connect.
• Uploaded files. Reference PDFs you upload are stored in private cloud storage tied to your account. PDF text is extracted locally in your browser; only bounded excerpts are sent to the server, and only when you enable "Use uploaded documents as context." Business card photos are sent to the configured automation workflow once for text extraction, and you review the extracted details before anything is saved. QR codes are decoded entirely on your device and never uploaded as images.
• Gmail data. With your explicit consent through Google OAuth, the app accesses your Gmail to create and manage email drafts, send drafts you confirm, and read message data needed to import and sync your email records (see section 2).
• Email records and settings. The app stores email subjects, bodies, recipients, and Gmail message identifiers for drafts and sent mail you manage in the app, plus your saved signature preferences (name, designation, contact details, and an optional logo image).

The app requests the following Google permissions, each tied to a feature you use:

• Basic profile (email, profile). To identify which Google account you connected and show it in the app.
• Gmail compose. To create email drafts in your Gmail, update them when you edit in the app, send drafts you explicitly confirm, and delete drafts you choose to regenerate or remove.
• Gmail read-only. Used only when you click "Import Gmail emails" or when the app syncs draft status — to read message metadata and content of your drafts and sent mail so the app can display them, detect replies and sent status, and avoid importing the same email twice.

The app does not read your inbox beyond these features, does not send email without your confirmation, and does not delete emails from Gmail when you delete an email record in the app. Your Google OAuth tokens are held by the connection gateway; the app stores only an encrypted connection key linked to your account.

• Application data (accounts, leads, email records, signature settings, uploaded PDFs) is stored in the app's cloud database and private file storage, with row-level access rules so each signed-in user can only reach their own data.
• Gmail connection keys are stored encrypted and are only used server-side to act on your behalf.
• Lead import, web research, business card extraction, and email drafting run through the configured automation workflows, which process the lead fields and instructions you provide and write results back to your app and your Google Sheet.
• PDF text extraction and QR decoding happen locally in your browser, so that content does not leave your device except for the bounded excerpts you explicitly enable.

Retention. Your data is kept until you delete it: you can delete individual leads, email records, and uploaded documents in the app at any time. Retention of backups and operational logs is managed by the app operator.

The app relies on the following categories of providers to operate:

• Hosting, database, authentication, and file storage — provided by the app's cloud platform (Lovable Cloud).
• Google — Gmail API for draft and mail features, and Google Sheets for the Master Leads spreadsheet you connect.
• Workflow automation (n8n) — runs lead import normalization, web research, business card text extraction, and AI-assisted email drafting using the data you submit.
• AI processing — email drafting, web research summarization, and card text extraction use AI models through the configured automation workflow.

We do not sell your data or use it for advertising. Data is shared with these providers only to the extent needed to run the features you use.

• Disconnect Gmail. You can revoke the app's access at any time from your Google Account under myaccount.google.com/permissions. Revoking access stops all Gmail features; your existing drafts remain in your Gmail.
• Delete individual data. Leads, email records, and uploaded documents can each be deleted directly in the app. Deleting an email record never deletes the underlying email in Gmail.
• Full account deletion. To request deletion of your account and all associated data, contact the app operator (section 6).

The app is operated by NU10. For privacy questions, data deletion requests, or concerns about this policy, contact the app operator.

This policy may be updated as the app evolves. Material changes will be reflected on this page.