Privacy Policy

Customer Finding Agent (“the Service”, “we”) helps business owners discover prospective customers and reach out to them by email and WhatsApp. This policy explains what data we collect, how we use it, and the choices you have.

Information we collect

Account data. When you sign up with Google or email/password we store your email address and, for Google sign-in, your name and profile picture.

Search & lead data. When you run a search we store the businesses we discover (name, category, address, public phone/website/email, ratings and reviews) and the fit scores we compute. This is business contact information sourced from public listings.

Outreach data. The email/WhatsApp messages you compose and a log of what was sent (recipient, status, timestamp), plus your opt-out / unsubscribe list.

Google user data & Gmail access

If you connect Google, we request the gmail.send scope so the Service can send the outreach emails you compose from your own Gmail account. We use Google user data solely to:

• authenticate you (email, name, profile picture); and
• send emails you explicitly create and choose to send.

We do not read, store, or analyze the contents of your mailbox, and we do not use Gmail access for advertising or to train AI/ML models. We store a Google refresh token (used only to send on your behalf), which you can revoke at any time at myaccount.google.com/permissions.

Customer Finding Agent's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use your information

• operate the discovery, scoring and outreach features you request;
• send the messages you compose and record their delivery status;
• honor unsubscribe / opt-out requests; and
• secure, maintain and improve the Service.

Sharing & subprocessors

We do not sell your data. We use trusted subprocessors to run the Service: Supabase (database & auth), Apify (business discovery), Google (sign-in & Gmail sending), and Vercel (hosting).

Retention & deletion

We keep your searches, leads and settings until you delete them or close your account. To delete your account and all associated data, email cagataycinarr@gmail.com and we will erase it within 30 days.

Your rights (KVKK / GDPR)

You may request access, correction, export or deletion of your personal data, and you may withdraw consent at any time. Recipients of outreach may unsubscribe via the link in every email; we honor opt-outs on all future sends.

Security

Data is stored with row-level security so each account can only access its own records. Credentials are transmitted over TLS. No method of storage or transmission is 100% secure, but we take reasonable measures to protect your information.

Changes

We may update this policy; material changes will be reflected by the “Last updated” date above.

Contact

Questions about this policy or your data: cagataycinarr@gmail.com.