Privacy Policy
This Privacy Policy explains how TechCarrel LLP ("we", "us", "our") handles information in connection with Trove ("the Service"), an AI-driven follow-up engine that lets a single operator draft personalized follow-up emails, send them from their own connected email account, and keep track of replies. It describes in particular how the Service accesses and uses data from Google APIs when you connect a Gmail account, and the safeguards we apply to that data.
1. Who this policy is for
Trove is operated as a single-operator tool. The "user" of the Service is the operator who signs in and connects their own mailbox(es). When you connect a Google account, you are authorizing the Service to act on your behalf for the limited purposes described below.
2. Information we collect
2.1 Information from your Google account
- Account email address — the email address of the Gmail account you connect, used to label and identify the connected mailbox.
- OAuth tokens — the access token, refresh token, and expiry issued by Google so the Service can send on your behalf and detect replies without asking you to sign in repeatedly.
- Reply / thread data for detection — when checking for replies to a thread you sent, the Service reads thread and message metadata (sender, subject, message ID, and date) and a short message snippet (roughly the first 100 characters). This is used solely to recognise that a reply occurred and to display it to you.
The Service does not read your wider inbox, your contacts, attachments, or any Google profile information beyond your account email address.
2.2 Information you provide
- Recipient context you upload or enter (for example, a contact's name, company, role, or notes) so the Service can draft a personalized message.
- Message content you write, edit, or approve within the Service.
2.3 Information collected automatically
- Basic operational logs (timestamps, request and error information) used to keep the Service running and secure.
3. Google OAuth scopes we request, and why
When you connect a Gmail account, the Service requests the following scopes:
| Scope | Why the Service needs it |
|---|---|
https://www.googleapis.com/auth/userinfo.email |
To read the email address of the account you connect, so the connected mailbox can be identified and labelled. |
https://www.googleapis.com/auth/gmail.send |
To send the follow-up messages you have reviewed and approved, from your own account, on your behalf. |
https://mail.google.com/ |
To read the limited thread and message metadata and snippets needed to detect replies to threads you sent, and to keep follow-ups within the correct conversation thread. |
4. How we use the information
- Send the messages you approve from your connected account. The Service does not send messages you have not reviewed and approved.
- Detect and surface replies to threads you sent, so responses appear in one place.
- Sequence engagement-aware follow-ups that fit the state of each conversation.
- Maintain mailbox health and respect daily sending limits you configure.
- Generate draft message text using AI providers (see Section 6). Recipient context and message text you provide may be sent to those providers to produce a draft. The content of your Gmail mailbox is not sent to AI providers for this purpose.
5. How we store and protect information
- Encrypted tokens. Google OAuth tokens are encrypted at rest using AES-256-GCM before being stored, and are decrypted only in memory when needed to call the Google API on your behalf. Tokens are automatically refreshed before expiry and re-encrypted.
- Access controls. Data is held in a private, single-tenant database that is not publicly exposed; access is limited to the operator and the maintainer of the host.
- Encryption in transit. All connections to the Service and to Google are over HTTPS/TLS.
- Minimisation. We request the narrowest scopes needed and read only the limited reply data described above.
6. Sharing and third parties
We do not sell your data and we do not use Google user data for advertising. We share information only with service providers that help us operate the Service:
- Google — the Gmail API, to send messages and detect replies as described above.
- AI text-generation providers (such as DeepSeek and Anthropic Claude) — to draft message text from the recipient context and content you provide.
- Email-deliverability tooling (such as Mailivery) — to help monitor sending health and deliverability.
- Hosting provider — the virtual private server on which the Service and its database run.
We may also disclose information if required by law, or to protect the security and integrity of the Service.
7. Google API Services — Limited Use disclosure
Trove's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, data obtained through Google APIs is used only to provide and improve the user-facing features described in this policy. We do not:
- use Google user data for serving advertisements;
- sell or transfer Google user data to data brokers or for any unrelated purpose;
- allow humans to read your Google user data, except where you explicitly grant it, where required for security or to comply with applicable law, or where the data has been aggregated and anonymised.
8. Data retention and deletion
- You are in control. You can disconnect a connected mailbox within the Service at any time, which removes its stored tokens.
- Revoke at Google. You can also revoke the Service's access at any time from your Google Account permissions page.
- Deletion requests. To request deletion of your data, email leadwithgaurav@gmail.com. We retain information only as long as needed to provide the Service or to meet legal obligations.
9. Changes to this policy
We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page.
10. Contact us
Questions about this policy or your data? Contact TechCarrel LLP at leadwithgaurav@gmail.com.
← Back to home