Privacy policy
What Proxell stores, why, and how to make it stop.
Written in plain language and kept in step with the code. If a sentence here is not true of the product, that is a bug and we want to hear about it.
Who we are
Proxell is operated by Third Coast Films, LLC, 1606 Headway Cir, Austin, TX 78754, United States. Questions about this policy go to wes@thirdcoastfilms.com. A person reads that inbox.
What Proxell does
Proxell finds companies that show a public sign of needing what you sell, reads their public website, writes a one-off email draft, and waits for you to approve it. It sends approved email from a mailbox you connect, or places drafts in your Gmail for you to send yourself. Nothing is sent without a person clicking approve.
Information about you, the account holder
When you sign in with Google we receive your email address and name. We store them to create your workspace and to know who approved what. If you pay through Stripe, Stripe sends us the email address you paid with, your Stripe customer and subscription ids, and the plan. We never see your card number.
If you paste writing samples under "Your voice", or import them from your Sent folder, we store up to ten of your own emails as text so the drafter can match how you write.
Your Google account and Gmail data
Connecting a mailbox asks Google for one of two permissions, and the Settings page says which before you click:
- Send email on your behalf (the standard connect). Proxell uses it for exactly one thing: sending an email after you approved it in the review queue. It cannot read your mail.
- Read, compose, send and permanently delete all your email (the full connect, currently available to test accounts only). Proxell uses it to: read your Sent folder once, on your request, to pick up to ten emails you wrote as writing samples; place approved drafts in your Gmail Drafts under a "Proxell" label; notice when you send one of those drafts, and when someone replies to a thread Proxell started, so the sequence stops and the lead is marked. We store the reply's sender, a short snippet and the message ids. We do not read, store or analyse any other message in your mailbox.
The token Google gives us is encrypted at rest with a key that lives only in our hosting environment. It is used only for the purposes above, only for your workspace, and never for advertising, profiling, training models, or anything unrelated to sending the email you approved. It is never sold, and it is shared only with the processors listed below that are needed to do the job. No human at Proxell reads your Gmail data except to debug a problem you reported, with your permission.
Proxell's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
You can revoke Proxell's access at any time at https://myaccount.google.com/permissions. Revoking stops all sending and reading immediately; the stored token becomes useless and we delete it on request.
Information about the people you write to
Proxell collects business contact information from public sources: job postings, company websites and careers pages, public LinkedIn posts, Google Maps listings, funding announcements, and email-finding services. For each prospect we may store the company name, website, city, the public signal that triggered the draft with its source URL, a summary of the company's own website, and a work email address with its verification status.
Every email Proxell sends carries the sender's physical mailing address, a visible opt-out line, and one-click unsubscribe headers. A recipient who opts out is added to a suppression list that every workspace on Proxell honours, and we keep that entry so the address is never written to again. Addresses that bounce are suppressed the same way.
If you are a recipient and want to know what Proxell holds about you or want it deleted, email wes@thirdcoastfilms.com from the address in question. We answer within ten business days.
Who processes data on our behalf
- Vercel, hosting and serverless functions.
- Supabase, the database.
- Anthropic, whose Claude models score prospects and write drafts. The public company information, the signal, your pitch context and your writing samples are sent to them for that purpose.
- Google, for sign-in and the Gmail API.
- Stripe, for billing.
- Apify, which runs the public-source scrapers. Hunter, which finds and verifies work email addresses.
- GitHub, whose scheduled actions start the hourly pipeline.
- RB2B, only if you turn on site tracking, to identify business visitors to your own website.
How long we keep it
Account, prospect and email records are kept while your workspace exists and until you ask us to delete them. Suppression entries are kept indefinitely, because they exist to stop mail. To delete your workspace, or any data in it, email wes@thirdcoastfilms.com from the address on the account.
Security
Data is stored in Supabase with access limited to the application's server-side functions. Mailbox tokens are encrypted with AES-256-GCM. Traffic is HTTPS only. There is no password reset flow to phish: sign-in is Google or a single operator password.
Children
Proxell is a business tool for adults. We do not knowingly collect information from anyone under 18.
Changes
When this policy changes, the date above changes with it, and the change is noted in the dated log on the home page.