Privacy Policy - ChatsPromo

1. Introduction

Welcome to ChatsPromo. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our email communication platform that integrates with Gmail API.

2. Information We Collect

When you use ChatsPromo CRM, we collect the following information:

2.1 Account Information

Email Address: Your Gmail address for authentication and identification
Profile Information: Basic profile data from your Google account (name, profile picture)
Google User ID: Unique identifier from Google OAuth

2.2 CRM Data (Stored Locally)

The following data is stored in your browser's local storage and never sent to our servers:

Lead Information: Names, email addresses, phone numbers, companies, and notes you add
Deal Information: Deal values, stages, and status
Reminders: Follow-up reminders you set for your leads
Email Drafts: Emails you compose in the CRM (only stored temporarily)
Custom Fields: Any additional fields you create for your leads

2.3 Usage Data

App Usage Statistics: Features you use, pages visited
Performance Metrics: Load times, errors (anonymized)
Device Information: Browser type, operating system (for compatibility)

🔒 Important - What We DO NOT Collect:

❌ Your email content or messages from Gmail
❌ Your Gmail inbox or sent emails
❌ Your email attachments
❌ Your Gmail contact list
❌ Any personal email data from your Gmail account
❌ Your CRM data (stored only in your browser)

3. How We Use Your Information

3.1 CRM Functionality

We use your information to provide CRM features:

Lead Management: Store and organize your leads locally in your browser
Email Sending: Send emails you compose through Gmail API
Reminders: Display follow-up reminders you set
Analytics: Show dashboard statistics based on your local data
Search: Enable searching through your leads and contacts

3.2 Authentication

Authenticating your identity via Google OAuth 2.0
Maintaining your login session securely
Displaying your profile information in the CRM

3.3 Service Improvement

Improving app functionality and user experience
Fixing bugs and technical issues
Providing customer support

We do NOT:

❌ Store your CRM data on our servers (it stays in your browser)
❌ Store your email content on our servers
❌ Read or access your Gmail inbox
❌ Share your data with third parties for marketing
❌ Use your data for advertising purposes
❌ Sell your information to anyone
❌ Access your leads or customer data

4. Gmail API Usage & Limited Scope

ChatsPromo uses the Gmail API with the gmail.send scope only. This is the most restrictive scope available and means:

✅ What We CAN Do:

Send emails that you compose in our app on your behalf
Use your Gmail account to deliver messages you create

❌ What We CANNOT Do:

Read your existing emails or inbox
Access your Gmail contacts
Modify your Gmail settings
Delete or archive your emails
Access your email attachments
View your email history
Access any email you didn't compose in our app

How It Works: All email composition happens locally on your device. When you press send, the email is transmitted directly to Gmail's servers using secure OAuth 2.0 authentication. We act only as a facilitator and never store the email content on our servers.

5. AI Auto-Reply Feature

Our AI-powered auto-reply feature:

Processes email content locally on your device
Uses AI models to generate contextual responses
Does not send your email data to external AI services without your explicit consent
Allows you to review and edit AI-generated responses before sending

5. Data Storage and Security

5.1 Where Your Data is Stored

🔐 Local Storage (Your Browser):

✅ All CRM data (leads, deals, reminders) is stored in your browser's LocalStorage
✅ Data never leaves your device unless you explicitly send an email
✅ You have complete control - clear browser data to delete everything
✅ No server-side database for your CRM data

☁️ Our Servers (Firebase):

Only your Google User ID and email address for authentication
Session tokens (automatically expire)
Anonymized usage analytics

5.2 Security Measures

No Email Storage: We do not store any email content on our servers
Local Processing: All CRM operations happen locally in your browser
Secure Authentication: Google OAuth 2.0 with industry-standard security
Encrypted Transmission: All data transmission uses HTTPS/TLS encryption
Minimal Server Data: We only store essential authentication information
No Third-Party Access: Your CRM data is never shared with third parties
Access Tokens: Gmail access tokens are stored securely and expire automatically

5.3 Data Backup

Since your CRM data is stored locally in your browser:

We recommend regularly exporting your leads data as backup
Clearing browser data will delete your CRM data
Use the export feature to save your data before switching browsers

6. Your Rights and Data Deletion

6.1 Your Rights

You have complete control over your data:

Access: View all data stored about you
Export: Download your CRM data at any time
Delete: Remove your account and all associated data
Revoke Access: Disconnect ChatsPromo from your Gmail account
Modify: Edit or update your CRM data anytime

6.2 How to Delete Your Data

Option 1: Delete CRM Data (Local)

Clear your browser's local storage
Or use browser settings: Clear browsing data → Cookies and site data
This immediately deletes all your leads, deals, and reminders

Option 2: Revoke Gmail Access

Visit Google Account Permissions
Find "ChatsPromo" in the list
Click "Remove Access"
This revokes our ability to send emails on your behalf

Option 3: Delete Account Completely

Email us at support@chatspromo.com
Request account deletion
We'll delete your authentication data within 30 days
Your local CRM data will remain until you clear browser storage

6.3 What Happens After Deletion

✅ Your authentication data is permanently deleted from our servers
✅ Gmail access is automatically revoked
✅ You can no longer sign in to ChatsPromo
✅ All server-side data is removed within 30 days
⚠️ Local CRM data remains in your browser until you clear it manually

7. Third-Party Services & APIs

7.1 Gmail API

API Used: Gmail API v1

Scope Requested: https://www.googleapis.com/auth/gmail.send

Purpose: Send emails on your behalf

Data Access: None - we can only send emails, not read them

Why We Need It: To enable you to send emails to your leads directly from the CRM

7.2 Google OAuth 2.0

Purpose: Secure authentication and authorization
Data Received: Email address, name, profile picture, user ID
Why We Need It: To verify your identity and connect to Gmail API

7.3 Firebase Services

Firebase Authentication: Manages Google OAuth login
Firebase Hosting: Hosts the web application
Firebase Analytics: Anonymized usage statistics (optional)
Data Stored: Only authentication tokens and user ID

7.4 Third-Party Privacy Policies

These services have their own privacy policies:

8. Data Retention

8.1 CRM Data (Local Storage)

Retention Period: Indefinitely, until you clear browser data
Location: Your browser's LocalStorage
Control: You can delete anytime by clearing browser data

8.2 Server-Side Data

Account Information: Retained while your account is active
Authentication Tokens: Automatically expire after 1 hour
Session Data: Cleared when you log out
Usage Analytics: Anonymized and retained for up to 90 days

8.3 Email Content

Retention: Never stored on our servers
Temporary Storage: Only in browser memory while composing
After Sending: Immediately cleared from memory

8.4 After Account Deletion

When you delete your account:

✅ Authentication data deleted within 30 days
✅ Session tokens immediately invalidated
✅ Gmail access automatically revoked
⚠️ Local CRM data remains until you clear browser storage

9. Children's Privacy

ChatsPromo is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

10. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Email: support@chatspromo.com
Response Time: We aim to respond within 48 hours

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by:

Posting the new Privacy Policy on this page
Updating the "Last Updated" date
Sending an email notification (for significant changes)

Continued use of ChatsPromo after changes constitutes acceptance of the updated policy.

12. Compliance

ChatsPromo complies with:

Google API Services User Data Policy
General Data Protection Regulation (GDPR) where applicable
California Consumer Privacy Act (CCPA) where applicable