Privacy Policy Effective Date: November 5, 2026 Last Updated: November 5, 2026 Welcome to Intry. Intry is an email productivity service available at https://intry.app. This Privacy Policy explains how we collect, access, use, store, protect, and delete personal information when you visit our website, join our waitlist, create an account, or connect your Gmail account. We are committed to protecting your privacy, minimizing unnecessary data collection, and giving you control over your information. By using Intry, you acknowledge the data practices described in this Privacy Policy. 1. Information We Collect We collect information necessary to provide and maintain Intry's services. 1.1 Account Information When you create an account or sign in, we may collect: - Your email address. - Your display name, if available. - Your profile picture URL, if available. - A unique account identifier. - Your selected timezone and account preferences. - Authentication and session information necessary to keep you signed in. If you sign in using Google or another supported identity provider, we receive the basic account information authorized through that provider. Signing in with Google does not automatically grant Intry permission to access your Gmail messages. Gmail access requires a separate authorization. 1.2 Waitlist Information When you join our early-access waitlist, we collect: - Your email address. - Your name, if voluntarily provided. - The date and time of registration. - Confirmation email delivery status and limited operational information. We use this information to manage early-access registrations and send relevant communications concerning Intry. Joining the waitlist does not automatically create an Intry account or connect your Gmail inbox. 1.3 Gmail Information Connecting Gmail is optional. If you choose to connect Gmail, Intry requests the following Google OAuth permission: https://www.googleapis.com/auth/gmail.readonly This permission allows Intry to read Gmail messages and related information. It does not authorize Intry to send, delete, archive, label, or modify messages in your Gmail account. The information Intry may access includes: - Gmail message and thread identifiers. - Sender names and email addresses. - Email subjects. - Short message snippets. - Gmail labels, flags, and relevant message metadata. - Message bodies when necessary to display an email or evaluate a user-defined priority rule. Intry accesses this information only to provide the email productivity features you authorize. 2. How We Use Your Information We use collected information to: - Create and maintain your Intry account. - Authenticate users and manage secure sessions. - Display your connected Gmail inbox. - Allow you to read Gmail messages within Intry. - Identify and organize priority emails. - Evaluate user-defined priority rules. - Create and manage action items associated with emails. - Track follow-ups associated with Gmail messages. - Save account preferences. - Maintain and troubleshoot application functionality. - Protect accounts and prevent unauthorized access. - Respond to support and privacy requests. - Manage the Intry waitlist and send relevant service communications. We do not use Gmail data for targeted advertising, sell Gmail information, or use Gmail content to train generalized artificial intelligence models. 3. How Gmail Data Is Processed and Stored We follow a data-minimization approach and avoid retaining full email contents unnecessarily. 3.1 Email Bodies Full Gmail message bodies are retrieved when necessary to display a message or evaluate a rule that depends on message content. When an email body is needed for priority-rule evaluation, it is processed temporarily in application memory and discarded after processing. Intry does not persist full Gmail message bodies or attachments in its database. Under the current implementation, Gmail message bodies are not intentionally stored in application logs, browser storage, external caches, or analytics systems. 3.2 Stored Gmail Metadata To support inbox organization and priority features, Intry stores limited Gmail-derived information, which may include: - Gmail message identifiers. - Gmail thread identifiers. - Email subjects. - Sender names and email addresses. - Short Gmail message snippets. - Gmail labels and message flags. - Priority classifications. - Explanations of why a message was classified as priority or normal. This information is used to maintain your organizational preferences and provide consistent functionality across sessions. Although full email bodies are not stored, email subjects and snippets may contain personal or sensitive information. We treat this metadata as protected user information. 3.3 Action Items and Follow-ups When you create an action item or follow-up, Intry may store: - The associated Gmail message or thread identifier. - Relevant email metadata. - The title, label, or note you provide. - Organizational information needed to manage the action item or follow-up. These records are used to provide the features you request. 3.4 Gmail Connection Credentials When you authorize Gmail access, Intry stores: - Your connected Gmail address. - Your Google account identifier. - An encrypted OAuth refresh token. The refresh token allows Intry to maintain authorized Gmail access without requiring you to reconnect every time you use the application. OAuth credentials are used only to maintain the Gmail connection and access the information necessary for Intry's authorized functionality. 4. Google API Services User Data Policy Intry's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including its Limited Use requirements. In particular: - We use Google user data only to provide or improve user-facing features that are appropriate to Intry's functionality. - We do not transfer Google user data to third parties for advertising purposes. - We do not sell Google user data. - We do not use Google user data to train generalized AI or machine-learning models. - We do not allow humans to read Google user data except where the user has affirmatively agreed, where necessary for security purposes, where required to comply with applicable law, or where otherwise permitted by Google's Limited Use requirements. Under the current implementation, Intry does not send Gmail message content to third-party AI services for analysis or model training. Access to Gmail information is limited to the functionality necessary to provide the services you request. 5. How We Share Information We do not sell your personal information. We may use trusted service providers to operate and maintain Intry, including: - Clerk: Authentication and account sign-in. - Supabase: Database infrastructure for account information, Gmail metadata, and application records. - Cloudflare: Application hosting, backend processing, and related infrastructure. - Transactional email providers: Delivery of account-related and waitlist confirmation messages. These providers process information as necessary to deliver their respective services, subject to their applicable terms and data-protection arrangements. We may also disclose information when required by applicable law or when necessary to investigate security incidents, prevent abuse, or protect the rights and safety of users and the service. We do not share Gmail content with advertisers or data brokers. 6. Data Security We use technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, and loss. These measures include, where applicable: - Encrypted storage of Gmail OAuth refresh tokens. - Authentication and access controls. - User-specific authorization for account and Gmail-related records. - Secure communications using HTTPS. - Restricted access to application infrastructure and stored information. - Data minimization for Gmail message content. - Operational logging designed to avoid recording Gmail message bodies, snippets, or OAuth credentials. No internet-based service can guarantee absolute security. We continually work to maintain appropriate protections for the information we process. 7. Data Retention We retain information for as long as reasonably necessary to provide Intry's services, maintain authorized accounts, and fulfill legitimate operational or legal requirements. Account Information Account information and preferences are retained while your Intry account remains active, unless deleted earlier. Gmail Connection Information Gmail connection information is retained while your Gmail account remains connected to Intry. When you disconnect Gmail, Intry removes the stored connection credentials and stops accessing Gmail through that connection. Gmail Metadata Stored Gmail metadata, priority classifications, action items, and follow-ups are retained as necessary to provide the associated features, until deleted through available controls, account deletion, or applicable retention processes. Waitlist Information Waitlist information is retained for managing early-access registration and related communications until it is deleted or no longer required for that purpose. You may request deletion of your waitlist information by contacting us. Certain limited information may be retained where required by law or necessary for legitimate security and operational purposes. 8. Your Choices and Controls You can control how Intry accesses and uses your information. 8.1 Connecting Gmail Connecting Gmail is optional and requires your explicit authorization. You can use supported account functionality without granting Gmail access, although inbox-related features will be unavailable. 8.2 Disconnecting Gmail You can disconnect Gmail through Intry's Settings. Disconnecting removes the stored Gmail connection credentials and stops future Gmail access through that connection. You may also revoke Intry's access directly through your Google Account permissions (https://myaccount.google.com/permissions). Disconnecting Gmail does not delete, modify, or otherwise change messages in your Gmail mailbox. 8.3 Deleting Gmail-Derived Information Intry provides controls for deleting stored Gmail-derived information, including priority classifications, action items, and follow-ups. Disconnecting Gmail and deleting stored organizational records may be separate actions. 8.4 Deleting Your Account You can request or initiate account deletion through the available account settings. Account deletion removes the associated Intry account information, Gmail connection, and linked application records, subject to applicable technical and legal retention requirements. Deleting your Intry account does not delete your Google account or the emails stored in Gmail. 8.5 Privacy Requests You may contact us to request access to, correction of, or deletion of your personal information, subject to applicable law. For privacy requests, contact: hello@send.intry.app 9. Cookies and Sessions Intry uses authentication-related cookies and similar mechanisms necessary to maintain secure user sessions and provide account functionality. These mechanisms help us recognize authenticated users and protect access to their accounts. We do not currently use Gmail information for advertising or behavioral marketing analytics. 10. International Data Processing Intry uses third-party cloud infrastructure to operate its services. Depending on the infrastructure provider and service configuration, personal information may be processed or stored in countries other than the country where you reside. We use appropriate contractual, technical, and organizational safeguards where required by applicable data-protection laws. 11. Children's Privacy Intry is not directed to children under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without appropriate authorization, we will take reasonable steps to delete that information. 12. Third-Party Services Intry may integrate with third-party services, including Google. Your use of those services is also subject to their respective privacy policies and terms. For information about Google's privacy practices, visit: https://policies.google.com/privacy Intry is an independent service and is not affiliated with or endorsed by Google. 13. Changes to This Privacy Policy We may update this Privacy Policy to reflect changes in our services, technology, data practices, or legal obligations. When changes are made, we will update the Last Updated date at the top of this policy. If we introduce new ways of using Gmail data, we will update this policy and obtain any additional authorization required before implementing those changes. We encourage users to review this policy periodically. 14. Contact Us If you have questions about this Privacy Policy, how Intry processes personal information, or how to exercise your privacy rights, please contact us. Intry Website: https://intry.app Email: hello@send.intry.app Your inbox, in order. © 2026 Intry.