Privacy Policy

1. Introduction

This Privacy Policy describes how Reqly (“we,” “us,” or “our”) collects, uses, and protects your information when you use Reqly (“the Service”). By using the Service, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

When you create an account, we collect:

• Email address
• Name (from Google profile)
• Profile picture (from Google profile)

Authentication Data

We store OAuth tokens to access your connected services:

• Google OAuth access and refresh tokens
• Slack OAuth access tokens

Connection Status

We track which services you have connected (Gmail, Slack, Google Drive).

What We Don’t Collect or Store

We do NOT store:

• Your emails or email content
• Your Slack messages
• Your Google Drive files or file content

We search your data in real-time via official APIs and do not retain the content.

3. How We Use Your Information

• Authenticate your account and connect to Gmail, Slack, and Google Drive.
• Perform real-time searches across your connected services and display results.
• Analyze usage patterns to fix bugs, develop new features, and optimize performance.
• Send service updates and respond to support requests.
• Protect against unauthorized access and detect abuse.

4. Google API Disclosure

Reqly’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide the search functionality described in this policy. We do not use your Google data for advertising, profiling, or any purpose unrelated to the Reqly search service.

5. Data Storage and Security

Data Storage

• Account data stored in Supabase (secure PostgreSQL database).
• OAuth tokens encrypted at rest.
• Hosted on secure cloud infrastructure (Vercel, Supabase).

Security Measures

• HTTPS encryption for all data in transit.
• OAuth tokens encrypted in database using AES-256.
• Regular security updates and access controls.

Data Retention

• Account data retained while your account is active.
• After account deletion: data deleted within 30 days.
• Backups may be retained for up to 90 days for recovery purposes.

6. How We Share Your Information

We do not sell your data.

Service Providers

We may share data with trusted service providers: Vercel (hosting), Supabase (database), and Stripe (payments, when implemented). These providers are contractually obligated to protect your data.

Third-Party Services

The Service integrates with Google and Slack. Your use is governed by their privacy policies:

• Google Privacy Policy
• Slack Privacy Policy

Legal Requirements

We may disclose your information if required by law, valid legal process, government requests, or to protect our rights or public safety.

7. Your Rights and Choices

• Access: View your account information in Settings.
• Disconnect services: Disconnect Gmail, Slack, or Drive anytime from Settings. You can also revoke access directly from your Google account permissions.
• Delete your account: Go to Settings → Delete Account. All data deleted within 30 days.
• Export your data: Contact us at notifications.reqly@gmail.com to request a copy.
• Opt-out of communications: Use the unsubscribe link in any email.

8. Cookies and Tracking

We use the following cookies:

• Session cookies (required for functionality).
• Authentication cookies (keep you logged in).

You can control cookies through your browser settings. Disabling cookies may affect Service functionality.

9. Children’s Privacy

The Service is not intended for users under 18. We do not knowingly collect data from children under 18. If we discover we have collected such data, we will delete it immediately.

10. GDPR Rights (EU Users)

If you are in the European Union, you have the right to:

• Access copies of your personal data.
• Request correction of inaccurate data.
• Request deletion of your data.
• Request limitation of data processing.
• Request transfer of your data.
• Object to processing of your data.
• Withdraw consent at any time.

To exercise these rights, contact us at notifications.reqly@gmail.com

11. CCPA Rights (California Users)

If you are a California resident, you have the right to:

• Know what personal information we collect and how we use it.
• Request deletion of your personal information.
• Opt-out of sale of personal information (we don’t sell data).
• Not be discriminated against for exercising your rights.

To exercise these rights, contact us at notifications.reqly@gmail.com

12. Changes to This Policy

• We may update this Privacy Policy from time to time.
• We will notify you of material changes by email or through the Service.
• Continued use after changes constitutes acceptance of the updated policy.
• We will update the “Last Updated” date at the top of this policy.

13. Contact

For questions about this Privacy Policy or our data practices, contact us at notifications.reqly@gmail.com