Privacy Policy
Last updated: June 12, 2026
1. Information We Collect
We collect information you provide directly when creating an account, completing onboarding, or using our services. This includes your name, email address, business description, and target customer profile. We also collect usage data such as leads synced, drafts generated, and emails sent through our platform.
2. How We Use Your Information
We use your information to provide and improve our AI-powered lead acquisition services, generate personalized outreach drafts using Claude (Anthropic's AI), identify and score leads from our verified contact database, send emails on your behalf via Gmail when authorized, and communicate with you about your account and subscription.
3. Google User Data
PhoenixAlliance integrates with Google Gmail via OAuth 2.0. The following describes exactly how we access, use, store, and protect your Google account data.
3a. Data Accessed
When you connect your Gmail account, PhoenixAlliance requests the Gmail Send scope (https://www.googleapis.com/auth/gmail.send). This grants us the ability to send emails on your behalf only. We do not request access to read, search, modify, or delete your existing emails or any other Google account data.
3b. Data Usage
Your Gmail OAuth credentials are used solely to send outreach emails to leads you have reviewed and approved within PhoenixAlliance. We never send emails without your explicit action (clicking "Send" within our platform). Your Gmail access is never used for advertising, profiling, or any purpose other than sending the outreach messages you initiate.
3c. Data Sharing
We do not sell, share, transfer, or disclose your Google user data to any third parties. Your OAuth tokens and any associated Google account information are never shared with external advertisers, data brokers, or analytics providers. The only transmission of Google data that occurs is the sending of emails you initiate through Gmail's own API.
3d. Data Storage & Protection
Your Gmail OAuth refresh token is stored encrypted at rest in our Supabase database. All data in transit is protected by HTTPS/TLS. We do not store your Gmail password at any point — authentication is handled entirely through Google's OAuth 2.0 protocol. Access tokens are short-lived and refreshed only as needed to send emails you initiate.
3e. Data Retention & Deletion
Your Gmail OAuth tokens are retained only while your account is active and Gmail remains connected. You can disconnect Gmail at any time from your Settings page, which immediately revokes and deletes your stored OAuth tokens from our system. Upon account deletion, all Google user data including OAuth tokens is permanently deleted within 30 days. You may also revoke access directly from your Google Account permissions page.
4. Third-Party Services
Our service integrates with the following third-party providers:
- Supabase — database and authentication
- Stripe — payment processing
- Anthropic (Claude) — AI draft generation
- People Data Labs — verified lead sourcing
- Google (Gmail) — email sending via OAuth 2.0
We do not sell your data to third parties.
5. Data Security
We implement industry-standard security measures including encrypted storage, HTTPS-only communication, and OAuth-based authentication. We do not store your Gmail password — all Gmail access uses Google's OAuth 2.0 protocol and can be revoked by you at any time from your Settings page or directly from your Google Account.
6. Data Retention
We retain your account data for as long as your account is active. Upon account deletion, your personal data and lead data are removed within 30 days. Aggregated, anonymized analytics data may be retained for product improvement purposes.
7. Your Rights
You have the right to access, correct, or delete your personal data at any time. You may disconnect Gmail or delete your account from your Settings page. For data requests or concerns, contact us at the email below.
8. Contact
If you have questions about this Privacy Policy, please contact us at support@phoenixalliance.io.