Privacy Policy

Last updated: September 2, 2026

What we access. When you connect your Gmail account, RetainerRadar requests read-only access to your inbox messages and the ability to create draft replies on your behalf. We never send emails without you reviewing and sending them yourself.

How we use your data. We scan recent inbox messages to detect brand partnership/retainer offers. Detected offers (sender, subject, date, and message content) are sent to Anthropic's Claude API to classify the email and, when you request it, draft a reply. Any information you share in the Creator Profile chat (rates, preferences, tone) is stored and used only to personalize replies drafted for your own account.

Limited use. Your Gmail data is used solely to provide and improve the retainer-detection and reply-drafting features of this app. We do not use it for advertising, do not sell it, and do not share it with any third party except the specific service providers listed below, each bound by their own privacy/data-processing terms to use data only as needed to deliver the service to you.

Who we share your data with. We share the minimum data needed with the following named third-party service providers, and no others:

• Anthropic (Claude API) — receives the sender, subject, date, and body text of scanned emails, in order to classify whether an email is a brand deal and to draft reply text. Anthropic does not use this data to train its models.
• Neon (database hosting) — stores your account data, detected deals, and encrypted credentials in our production database.
• Render (application hosting) — runs the application server that all requests and background scans go through.
• Stripe (billing, subscribers only) — processes payment and subscription information; does not receive Gmail content.

How we protect your data. All traffic to and from the app is encrypted in transit (HTTPS/TLS). Gmail access is authorized via OAuth tokens that are stored server-side only and never exposed to your browser or any third party outside the providers listed above. For Yahoo/iCloud accounts, app passwords are encrypted at rest using AES-256-GCM before being stored, and are decrypted only in-memory, only when needed to connect to your mailbox. Access to the production database is restricted to the application's own backend service.

Human access. We do not manually read your emails. Automated access occurs only to power the features described above.

Data retention. Detected offers and your creator profile are retained until you delete your account or disconnect Gmail access, at which point associated data is removed from our active database.

Your controls. You can disconnect your Gmail account at any time via Logout, which revokes our access. Contact us to request full account deletion.

Contact. Questions about this policy can be sent to the app owner via the contact information provided at signup.