Política de Privacidad

Google user data

Followthrough's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Followthrough requests a single Google permission: https://www.googleapis.com/auth/gmail.readonly. This is read-only. Followthrough cannot send, delete, or modify mail on your behalf.

We use that permission only to:

• identify messages you have sent and replies you have received, so we can tell which tracked conversations have gone quiet;
• match a reply to the correct conversation, using message and thread identifiers; and
• recognise a marker that the extension places in a message you are composing, so a newly sent message can be linked to the conversation you asked us to track.

We do not use Google user data to serve advertising, and we do not sell it or share it with data brokers. We do not use it to train generalised artificial intelligence or machine learning models. Humans at Clarivo do not read your mail, except in the narrow cases described in "When a person might see your data" below.

What Followthrough reads, and what it keeps

This distinction matters, so we want to be precise about it rather than reassuring.

What we read: to detect replies, our backend retrieves your recent messages from Gmail — both sent and received — and processes the full message, including headers and body text. This happens automatically, in memory, on our servers. We read only enough to answer two questions: is this a reply on a conversation you asked us to track, and does it carry one of our markers?

What we keep: we do not store the body, subject line, or a preview of your messages anywhere. Once a message has been processed, the content is discarded. What persists in our database is limited to the following.

Link tracking, and the people you email

If a message you send contains a link that Followthrough is tracking, that link routes through our servers before continuing to its destination. When it is opened we record the time and a judgement about whether the click looked automated — corporate security scanners open links routinely, and we try not to report those as real engagement.

That is the whole record. We do not store the opener's IP address, which is used only momentarily to limit abusive traffic, and we do not store their browser user agent. We delete link click records after 90 days.

The people you email are not Followthrough users and have not agreed to this policy. We think you should know that plainly. We keep this data to the minimum that makes the feature work, and we do not build profiles of your recipients, sell this data, or use it for advertising.

If you use Followthrough, you are responsible for making sure your own use of link tracking complies with the law that applies to you and to the people you contact — in some places that includes telling recipients that you track engagement.

Why we are allowed to process this (legal bases)

If the EU or UK GDPR applies to you, our legal bases are: performance of a contract, for the processing needed to deliver Followthrough to you; legitimate interests, for keeping the service secure, preventing abuse, and the link-tracking described above; and consent, where we ask for it, such as marketing email. You can withdraw consent at any time.

Who else processes your data

We keep our vendor list short on purpose. We use three subprocessors, listed with their roles and locations on our Subprocessors page. We do not use advertising networks, and we do not currently run any third-party analytics or session-recording tools on our site or in the extension.

We may also disclose data if the law requires it, to protect our rights or someone's safety, or to a buyer if the business is acquired — in which case this policy continues to apply until you are told otherwise.

We do not sell personal information, and we do not share it for cross-context behavioural advertising.

When a person might see your data

Automated systems do the work. A person at Clarivo would look at data relating to your account only if you ask us to while we are helping you with a support problem, if we need to investigate abuse or a security incident, or if the law requires it. Even then, message content is not retained for us to look at.

How long we keep things

Message content is not retained at all. Account data and tracking records are kept while your account is active. If you disconnect your mailbox, we delete the stored Google token and stop processing your mail. If you delete your account, we delete the associated records. Copies may persist in encrypted backups for up to 30 days after deletion, after which they are overwritten.

Your choices and rights

You can disconnect your mailbox at any time from the extension, which stops all processing. You can also revoke Followthrough's access directly in your Google Account security settings. You can stop tracking any individual conversation, or mute it.

Depending on where you live — this includes the EEA, the UK, California, and a growing number of US states — you may have the right to access the personal data we hold about you, correct it, delete it, receive a portable copy, object to or restrict certain processing, and appeal a decision we make about such a request. We honour these requests regardless of where you live, rather than checking whether a particular law entitles you to them.

To make a request, email us at [email protected]. We will respond within the time the applicable law allows. We will not discriminate against you for exercising these rights. If you are in the EEA or UK you also have the right to complain to your local data protection authority.

Where your data is processed

Clarivo is based in the United States, and our infrastructure is hosted in the United States. If you use Followthrough from outside the US, your data is transferred there. For transfers from the EEA or the UK we rely on the European Commission's Standard Contractual Clauses and the UK Addendum with our subprocessors.

Security

Data is encrypted in transit with TLS and at rest by our hosting providers. Google tokens are held in an encrypted secret store rather than ordinary database columns. Access to production systems is limited to people who need it. Our Security page describes our posture, including what we have not yet done.

Children

Followthrough is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.

Changes to this policy

If we change this policy we will update the date at the top. If a change materially affects how we handle your data, we will tell you — by email or in the extension — before it takes effect.

Contact us

Clarivo, Inc., c/o Legalinc Corporate Services Inc., 131 Continental Dr, Suite 305, Newark, DE 19713, United States. Email: [email protected].