Privacy Policy

Data We Access

We request read-only access to your Gmail account and Google Contacts solely to identify people you have meaningfully communicated with.

Data We Process (Not Store)

Email metadata (sender names, email addresses, subject lines, message counts) and message content are processed in memory on our servers to understand your relationships. Nothing is stored, logged, or retained beyond what is described below. All data is deleted immediately after your CSV is generated.

Data We Store

• Your email address (to deliver your download link)
• Job status (pending/processing/complete)
• Your filter preferences (date range, excluded domains) — deleted after job completion

Data We Never Store

• Email content is processed in memory but never written to disk, logged, or persisted in any database
• Contact names or personal information from your contacts

Data Deletion

All processed data is permanently deleted within 15 minutes of your download, or within 24 hours if no download occurs. Your Google access token is deleted immediately after processing completes.

Data Security

• All connections to our servers are encrypted using HTTPS/TLS
• Google user data is processed entirely in memory and is never written to disk or persisted in any database
• Google OAuth access tokens are revoked and deleted immediately after processing completes
• We do not retain any copies of your email content, contact data, or Google account credentials

Google API Services

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Prohibited Uses

We do not use Google user data for any purpose other than providing the contact extraction service you requested. Specifically, Google user data is never used for:

• Targeted, personalized, or interest-based advertising
• Selling, renting, or trading data to third parties or data brokers
• Training AI or machine learning models
• Determining creditworthiness or for lending purposes
• Any purpose unrelated to the core functionality of WhoDoYouKnow

Third Parties

We do not sell, rent, or trade your Google user data to any third party. We only share data with the following service providers, strictly to operate the service:

• OpenRouter: Routes AI inference to models from OpenAI and Anthropic. Only email metadata (addresses and subject snippets) is sent for contact categorization. These providers have stated that API data is not used for model training.
• Vercel: hosting and temporary file storage

Your Rights

You may request deletion of your data at any time by emailing [email protected].

Contact

[email protected]