Privacy
Last updated 2026-05-03
What we collect
When you connect your Google account, Tacitry receives an OAuth token from Google that lets us read and modify your Gmail and read/write your Google Calendar on your behalf. We also receive your name, email, and profile photo from Google for sign-in.
We never collect data from any account you have not explicitly connected.
What we do with it
On your initial connection, Tacitry analyzes up to 300 of your most recent sent messages to learn your writing style. The bodies of those messages are processed in memory and discarded; only extracted style patterns (tone, signature, common phrases) are retained.
When a new email arrives, Tacitry drafts a reply for you to accept, edit, or reject. The thread context required to draft is fetched on demand and not stored beyond what's needed to render the draft.
Calendar events are read on demand to inform replies and to propose times. Events are created or updated only when you explicitly accept a draft that schedules.
What we delete, and when
- Bootstrap message bodies: discarded within 7 days of being processed (enforced via scheduled job).
- Action payloads (drafts, proposed schedule changes): retained for 90 days, then purged.
- Style patterns and corrections: retained for as long as you use the service, since they are how the agent learns your judgment.
- Account deletion: when you delete your account, every row tied to your workspace is removed within 7 days.
What we do NOT do
- We do not train any model on your email content.
- We do not share your data with advertisers.
- We do not read messages from other users to inform what we generate for you, and vice versa.
- We do not use the
gmail.readonlyscope. Onlygmail.modify,gmail.send, andgmail.settings.basic.
Subprocessors
- Anthropic — drafting and classification calls. Configured for zero-retention.
- Supabase — Postgres database (US region) and authentication.
- Fly.io — application hosting (US region).
- Cloudflare — landing page and CDN.
- Stripe — payment processing.
- Sentry — error reporting.
Your rights
You can export everything Tacitry holds about you, or delete it entirely, at any time. Email privacy@tacitry.app and we will respond within 7 days.
You can revoke Tacitry's access to your Google account at any time from your Google account permissions page.
Contact
Questions: privacy@tacitry.app.