Privacy policy

Pactline is a deal-management tool for influencer-marketing agencies. An agency (the "workspace") connects the Gmail accounts its employees use for work, and Pactline turns those emails into organised deals with brands and creators, summarises them, suggests replies and, where the workspace has chosen to allow it, sends routine replies on the employee's behalf under limits the workspace sets. This policy explains what data Pactline handles, why, and what control you have.

Who is responsible

The workspace (the agency) decides to use Pactline and connects its mailboxes; it is the controller of the data in its workspace. Pactline processes that data on the workspace's instructions. Questions and requests: support@pactline.app.

What we collect

• Account data. Your name, email address and profile picture from Google sign-in or the email you sign in with; your role in the workspace.
• Gmail data for mailboxes a person connects: message headers (sender, recipients, subject, dates, labels), message bodies and attachment names and sizes for the last 90 days and from then on, plus the emails Pactline sends from that mailbox. Attachment contents are not stored; links open them in Gmail.
• Data you enter. Contacts, campaigns, playbooks (rate ranges, terms), deals, notes, tags, rules and settings.
• Usage and security logs. Who changed what in the workspace (audit log), AI decisions and their reasons, sign-ins and errors. Logs never contain email passwords or OAuth tokens.

Google user data and the Gmail scopes we request

When a person connects a Gmail mailbox, Pactline asks Google for the gmail.modify and gmail.send permissions, plus the email address of the account. Pactline uses them only to:

• read messages in the connected mailbox so they appear in the workspace, grouped into deal threads, with a summary, the commercial terms the AI found (rates, deliverables, usage rights, deadlines) and a suggested reply;
• receive new-message notifications and keep the mailbox in sync;
• mark messages read or unread and archive or un-archive them when a person does the same in Pactline;
• send replies inside the existing thread when a person approves a draft in Pactline, or automatically for categories of routine messages the workspace has explicitly switched on, within numeric limits the workspace configured. Every send is recorded and can be undone for two minutes before it leaves.

Pactline never deletes mail, never reads mail from accounts other than the ones a person connected, and never shows one workspace's data to another.

Limited Use. Pactline's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How the AI uses your data

To classify emails, extract terms and draft replies, Pactline sends the relevant message text to Anthropic's Claude API under terms that do not permit Anthropic to train models on that data. Optional web lookups (off by default, switched on per workspace) send only a brand or creator name to a web search, never email content. Pactline does not use your data to train or improve generalised AI models, and no person at Pactline reads your mail except with your explicit permission for a specific support request, for security, or where the law requires it.

Who we share data with

• Hosting and infrastructure providers that run Pactline (servers, database, backups).
• Anthropic (AI processing, as above) and, when the workspace enables web lookups, the search provider behind them.
• Email and push-notification delivery services for the notifications Pactline sends to workspace members.
• Nobody else. Pactline does not sell data and does not use it for advertising.

Storage, security and retention

• Gmail access tokens are encrypted at rest with a key stored outside the database; data in transit is encrypted with TLS.
• Each workspace's data is isolated in the database by row-level security; within a workspace, a mailbox owner can restrict who sees its threads.
• Email data is kept while the mailbox stays connected. Workspace owners can set a retention window (90 to 730 days) after which the bodies of finished conversations are blanked.
• Disconnecting a mailbox deletes its access tokens immediately; Pactline stops reading and sending for it. Deleting a workspace deletes all of its data. Backups age out within 14 days.

Your choices

• Disconnect a mailbox at any time under Settings → Mailboxes, or revoke Pactline's access from your Google Account permissions page.
• Workspace owners can export every record as JSON and delete the workspace under Settings → Organization.
• Ask us to access, correct or delete your personal data by writing to support@pactline.app.

Changes

If this policy changes in a way that matters, workspace owners are told by email before the change applies. The date at the top is the last revision.