Privacy Policy

Google user data

Followthrough's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Followthrough requests two Google permissions. The first is https://www.googleapis.com/auth/gmail.readonly. This is read-only. Followthrough cannot send, delete, or modify mail on your behalf.

We use the Gmail permission only to:

• identify messages you have sent and replies you have received, so we can tell which tracked conversations have gone quiet;
• match a reply to the correct conversation, using message and thread identifiers; and
• recognise a marker that the extension places in a message you are composing, so a newly sent message can be linked to the conversation you asked us to track.

The second is https://www.googleapis.com/auth/userinfo.profile, which returns the basic profile on your Google account. We use it for one thing: to read your name, so the extension can address you by it instead of showing an impersonal screen. It gives no access to your mail. Of what it returns we keep only your name — not your profile picture or any other field. Declining this permission does not stop Followthrough working; the extension simply drops the greeting. If we already hold your name and you would rather we did not, ask us to remove it as described in "Your choices and rights".

We do not use Google user data to serve advertising, and we do not sell it or share it with data brokers. We do not use it to train generalised artificial intelligence or machine learning models. Humans at Clarivo do not read your mail, except in the narrow cases described in "When a person might see your data" below.

What Followthrough reads, and what it keeps

This distinction matters, so we want to be precise about it rather than reassuring.

What we read: to detect replies, our backend retrieves your recent messages from Gmail — both sent and received — and processes the full message, including headers and body text. This happens automatically, in memory, on our servers. We read only enough to answer two questions: is this a reply on a conversation you asked us to track, and does it carry one of our markers?

What we keep: we do not store the body, subject line, or a preview of your messages anywhere. Once a message has been processed, the content is discarded. What persists in our database is limited to the following.

Link tracking, and the people you email

If a message you send contains a link that Followthrough is tracking, that link routes through our servers before continuing to its destination. When it is opened we record the time and a judgement about whether the click looked automated — corporate security scanners open links routinely, and we try not to report those as real engagement.

That is the whole record. We do not store the opener's IP address, which is used only momentarily to limit abusive traffic, and we do not store their browser user agent. We delete link click records after 90 days.

The people you email are not Followthrough users and have not agreed to this policy. We think you should know that plainly. For a conversation you track, we store the recipient’s email address, because recognising their reply is the whole point of the product; it is deleted with your account. We keep this data to the minimum that makes the feature work, and we do not build profiles of your recipients, sell this data, or use it for advertising.

If you use Followthrough, you are responsible for making sure your own use of link tracking complies with the law that applies to you and to the people you contact — in some places that includes telling recipients that you track engagement.

Payments

If you subscribe, payment is handled by Stripe on Stripe's own hosted checkout page. You enter your card details on Stripe's page, not on ours. Your card number never passes through our servers, and we could not store it if we wanted to.

What we can see, in Stripe's dashboard, is the ordinary record of a paying customer: the name and email address you give at checkout, your billing address and country, the brand and last four digits of your card, and your invoice and payment history. Stripe collects this as our payment processor and also uses it for its own fraud prevention and legal compliance, as its own privacy policy describes.

Our own database holds no billing records at all today. There is no subscriptions table and no payments table in it — Stripe is where that information lives. If that changes we will update this page before it does.

Why we are allowed to process this (legal bases)

If the EU or UK GDPR applies to you, our legal bases are: performance of a contract, for the processing needed to deliver Followthrough to you and to take payment for it; legitimate interests, for keeping the service secure, preventing abuse, the link-tracking described above, and measuring which pages of our website get visited; compliance with a legal obligation, for the invoice and tax records we are required to keep; and consent, where we ask for it, such as marketing email. You can withdraw consent at any time.

Who else processes your data

We keep our vendor list short on purpose. We use six subprocessors, listed with their roles and locations on our Subprocessors page. We do not use advertising networks. We use one analytics tool, PostHog, on our marketing website only — configured to set no cookies, store nothing on your device and discard IP addresses — and we run no analytics or session-recording tools inside the extension at all. The extension and our backend do report crashes and errors to Sentry so we can fix them; those reports carry an error message and a stack trace, never a session recording, and nothing from the parts of the extension that run inside Gmail.

We may also disclose data if the law requires it, to protect our rights or someone's safety, or to a buyer if the business is acquired — in which case this policy continues to apply until you are told otherwise.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

When a person might see your data

Automated systems do the work. A person at Clarivo would look at data relating to your account only if you ask us to while we are helping you with a support problem, if we need to investigate abuse or a security incident, or if the law requires it. Even then, message content is not retained for us to look at.

How long we keep things

Message content is not retained at all. Account data and tracking records are kept while your account is active. If you disconnect your mailbox, we delete the stored Google token and stop processing your mail. If you delete your account, we delete the associated records. Copies may persist in encrypted backups for up to 30 days after deletion, after which they are overwritten. There is one exception, and it is a legal one rather than a preference: if you have paid us, the record of that transaction — the invoice, the amount, the date — is something we and Stripe are required to keep for tax and accounting purposes, and we keep it for as long as the law requires even after you delete your account. It contains no message data.

Your choices and rights

You can disconnect your mailbox at any time from the extension, which stops all processing. You can also revoke Followthrough's access directly in your Google Account security settings. You can stop tracking any individual conversation, or mute it.

Depending on where you live — this includes the EEA, the UK, California, and a growing number of US states — you may have the right to access the personal data we hold about you, correct it, delete it, receive a portable copy, object to or restrict certain processing, and appeal a decision we make about such a request. We honour these requests regardless of where you live, rather than checking whether a particular law entitles you to them.

To make a request, email us at privacy@clarivo.co. We will respond within the time the applicable law allows. We will not discriminate against you for exercising these rights. If you are in the EEA or UK you also have the right to complain to your local data protection authority.

Where your data is processed

Clarivo is based in the United States, and our infrastructure is hosted in the United States. If you use Followthrough from outside the US, your data is transferred there. For transfers from the EEA or the UK we rely on the European Commission's Standard Contractual Clauses and the UK Addendum with our subprocessors.

Security

Data is encrypted in transit with TLS and at rest by our hosting providers. Google tokens are held in an encrypted secret store rather than ordinary database columns. Access to production systems is limited to people who need it. Our Security page describes our posture, including what we have not yet done.

Children

Followthrough is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top. If a change materially affects how we handle your data, we will tell you — by email or in the extension — before it takes effect.

Contact us

Clarivo, Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Email: privacy@clarivo.co.