Privacy Policy

Last updated: May 2026

1. Information We Collect

We collect information you provide when creating an account, including your name and email address (via Google OAuth). We also collect usage data generated through your use of the service, such as emails you generate, your preferences, and feature usage statistics.

We do not sell your personal data to third parties.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve Proxelion
  • Process your subscription and manage billing
  • Respond to your support requests and questions
  • Send transactional communications (account, billing)
  • Monitor and analyze usage to improve the product

Email content you generate is used solely to produce your requested output and is never used to train AI models or shared with other users.

3. Gmail Integration & Google User Data

Proxelion offers an optional Gmail integration that allows you to send emails directly from the platform. This section explains exactly how we handle your Google account data.

What permissions we request

We request only the gmail.send scope, which allows Proxelion to send emails on your behalf. We do not request access to read, modify, delete, or manage your inbox or any existing emails.

What we access

We access only the minimum data necessary to send emails you explicitly compose and approve within Proxelion. We retrieve your Gmail address solely to display which account is connected.

What we do NOT do

  • We do not read, scan, or store your inbox or existing emails
  • We do not access your Gmail contacts or calendar
  • We do not share your Google data with any third parties
  • We do not use your Gmail data to train AI models

How we store your tokens

OAuth access and refresh tokens are stored securely in our database (Supabase, encrypted at rest). Tokens are used exclusively to send emails you initiate. Access tokens expire after 1 hour and are refreshed automatically only when needed.

How to revoke access

You can disconnect your Gmail account at any time from Settings → Gmail Integration → Disconnect. This immediately removes all stored tokens. You can also revoke access from your Google Account permissions page.

Proxelion's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Storage & Security

Your data is stored securely using Supabase (PostgreSQL) with encryption at rest and in transit (TLS). We implement industry-standard security practices to protect your information from unauthorized access, disclosure, alteration, or destruction.

We retain your account data for as long as your account is active. You may request deletion of your account and all associated data at any time from Settings → Delete Account, or by contacting us.

5. Third-Party Services

We use the following third-party services to operate Proxelion:

  • Google — Authentication (Google OAuth) and optional Gmail sending
  • Supabase — Database and authentication infrastructure
  • Polar.sh — Subscription and payment processing
  • AI providers — Email generation (data is not retained by providers for training)
  • Vercel — Application hosting

Each service has its own privacy policy governing their use of your data.

6. Cookies

We use cookies and similar technologies to maintain your session and remember your preferences. Authentication cookies are required for the service to function. You can configure your browser to refuse cookies, though some features may not work correctly.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

  • Access — Request a copy of the data we hold about you
  • Deletion — Request deletion of your account and all associated data
  • Correction — Request correction of inaccurate data
  • Portability — Request an export of your data

To exercise any of these rights, contact us at youssef@proxelion.com.

8. Children's Privacy

Proxelion is not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by updating the "Last updated" date at the top of this page. Continued use of Proxelion after changes constitutes acceptance of the updated policy.

10. Contact

For privacy-related questions or requests, contact us at:

youssef@proxelion.com

Proxelion — proxelion.com