Privacy Policy

We collect only what is needed to run the service:

• Your email address (used to identify your account)
• Email metadata: sender name, subject line, and snippet of email body
• Encrypted OAuth tokens used to connect to your Gmail account
• Action history — a log of what the agent has done on your behalf

Your data powers the AI agent that reads and manages your inbox. Specifically, we use it to authenticate with Gmail on your behalf, pass relevant email content to our AI provider for analysis, surface proposed actions for your review, and maintain a history of completed actions.

We do not use your data for advertising, profiling, or any purpose unrelated to operating prmptree.

We rely on the following third parties to provide the service:

• Anthropic Claude AI— email content is sent to Anthropic for AI processing. Anthropic's privacy policy governs their handling of this data.
• Google Gmail API— we use Google's official API to read, send, and archive emails on your behalf with the permissions you grant.
• Supabase— your account data and encrypted tokens are stored in Supabase's cloud database infrastructure.
• Vercel — prmptree is hosted on Vercel. Vercel may process request metadata as part of normal hosting operations.

We do not sell, rent, or trade your personal data to any third party, ever. Your inbox data exists solely to provide you with the prmptree service.

We retain your data for as long as you have an active account. When you delete your account, we delete all associated data — including your email metadata, action history, and OAuth tokens — within 30 days.

You can access, correct, or delete your data at any time from the Settings page inside the app. You can also disconnect your Gmail account and revoke all permissions from Google's security settings.

If you are located in the EU or UK, you have the following rights under GDPR/UK GDPR:

• Right to access — request a copy of your personal data
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your personal data
• Right to data portability — request your data in a machine-readable format

To exercise any of these rights, email us at kadjeikoranteng@gmail.com and we will respond within 30 days.

prmptree is not directed at children under the age of 13. We do not knowingly collect personal data from anyone under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

Questions about this policy? Email us at kadjeikoranteng@gmail.com.