Privacy Policy

1. Information we collect

• Account information: your name, email address and profile picture when you sign in with Google or email.
• Gmail data (only with your permission): when you connect Gmail, we read message metadata (sender, subject, date, thread ID), short previews, and — only when needed to fill in a missing item name or price — the message body of marketplace emails.
• Data you enter: settings such as reply tone, fee rates, item cost, shipping cost, floor prices and replies you write.
• Technical data: basic logs (sync times, errors) needed to run and secure the service.

2. Google permissions we request and why

• gmail.readonly — to find marketplace selling emails (offers, buyer messages, order issues) and show them in your Action Inbox.
• gmail.send — to send a reply you write and explicitly press Send on, in the original marketplace email thread. Nothing is ever sent automatically.
• userinfo.email / userinfo.profile — to identify your account.

We never delete, archive, label or otherwise modify messages in your Gmail. Archiving inside Crossflo affects only Crossflo's own copy.

3. Google API Services User Data Policy — Limited Use

Crossflo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We use Gmail data only to provide and improve the user-facing features of the Action Inbox that you can see in the app.
• We do not transfer Gmail data to others except as needed to provide those features, to comply with law, or as part of a merger or acquisition with notice to you.
• We do not use Gmail data for advertising, including retargeting, personalized or interest-based ads.
• We do not sell Gmail data, and we do not use it to build user profiles, for credit decisions or for data brokering.
• No human reads your Gmail data unless you give explicit permission for a specific message (for example, a support request), it is needed for security purposes such as investigating abuse, to comply with law, or the data is aggregated and anonymized for internal operations.
• We do not use Gmail data to train general-purpose artificial intelligence or machine learning models.

4. How we use AI

To sort unclear emails, summarize a conversation or draft a reply you asked for, we may send the relevant email text to an AI service that processes it on our behalf only to return that result. It is not used to train their models. Prices, fees and offer recommendations are calculated by fixed rules, not by AI. AI drafts are always editable and never sent automatically.

5. Storage, retention and security

• We store subjects, senders, short previews and the details we extract (item, buyer, prices). Full email bodies are read only when needed and are not stored.
• Stored email excerpts are automatically deleted after your retention period (90 days by default, adjustable in Settings).
• Google access tokens are encrypted and are never sent to your browser.
• Data is encrypted in transit (HTTPS) and at rest, and each seller's data is accessible only to that seller's account. Administrators see only anonymous aggregate health figures, never your messages.

6. Sharing

We do not sell your data. We share it only with service providers that host and run Crossflo (cloud hosting, database, AI processing) under confidentiality obligations, or when required by law.

7. Your choices and deleting your data

• In Settings you can disconnect Gmail, or disconnect and delete all your Crossflo data. Deletion removes Crossflo's copies immediately; your Gmail is untouched.
• You can revoke Crossflo's access at any time from your Google Account permissions.
• To request a copy or full deletion of your account, email support@crossflo.io. We respond within 30 days.

8. Children

Crossflo is not intended for anyone under 18 and we do not knowingly collect their data.

9. Changes and contact

We will post any changes on this page and update the effective date. Questions: support@crossflo.io.