Privacy Policy

Information we collect

• Account information. Your name, email address, organization, and authentication details when you create an account or sign in.
• Email content you connect. When you connect Gmail or Outlook, we access the email threads you ask us to draft replies for — including incoming messages and the drafts we generate — to provide the service.
• Google and Microsoft account data. With your authorization via OAuth, we request the minimum scopes needed: read access to your mail (to read the thread for context) and draft/compose access (to save drafts). We never request permission to send or delete mail.
• Voice and preferences. Settings you configure (tone, greeting, closing, phrases to avoid) and signals derived from your edits, used to personalize your drafts.
• Usage and device data. Limited technical data (e.g., feature usage, counts, error logs) to operate and improve the service.
• Cookies. Strictly necessary cookies for authentication and session security. We do not use advertising cookies.

How we use your information

• To read the relevant email thread and generate a draft reply for your review.
• To personalize drafts to your writing voice (using your own data, for you).
• To surface privilege, PII, risk, and compliance signals before you send.
• To operate, secure, support, and improve the service, and to process billing.

Google API Services — Limited Use

C2Stream’s use and transfer of information received from Google APIs to any other app adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the C2Stream features you request; we do not transfer or sell it; we do not use it for advertising; we do not allow humans to read it except (a) with your consent (for example, to troubleshoot a support request), (b) for security purposes, or (c) where required by law; and we do not use it to develop, improve, or train generalized AI/ML models. The same principles apply to data received through Microsoft Graph (Outlook).

How we protect your data before it reaches AI

Before any email content is sent to our AI provider to generate a draft, C2Stream automatically redacts sensitive personal identifiers (such as Social Security numbers, payment card numbers, email addresses, and phone numbers). We extract the meaning and your writing style — not raw personal data — to produce a draft.

How we share information

We do not sell your information. We share it only with service providers who process it on our behalf, under contract, to deliver the service:

• AI provider (Anthropic) — receives the redacted thread to generate a draft. We do not permit your content to be used to train its generalized models.
• Hosting and infrastructure — to run the application securely.
• Database and authentication — to store your account, settings, and drafts.
• Payments — to process subscriptions (we do not store full card numbers).

We may also disclose information to comply with law or to protect rights and safety.

Data retention and deletion

We retain your information only as long as needed to provide the service and meet legal obligations, and we favor minimal retention. You can disconnect a mailbox or delete your account at any time; upon deletion we remove or de-identify your personal data within a reasonable period, except where retention is legally required. To request deletion, contact us at the address below.

Security

We protect your data with encryption in transit and at rest, least-privilege access controls, OAuth tokens stored encrypted, secret-scanning, and audit logging. No system is perfectly secure, but we work to protect your information using industry-standard practices.

Your rights

Depending on where you live, you may have rights to access, correct, delete, or export your personal data, and to object to or restrict certain processing (including under the GDPR and CCPA/CPRA). To exercise these rights, contact us. We do not discriminate against you for exercising them.

Children

C2Stream is for legal professionals and is not directed to anyone under 18.

Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “last updated” date; material changes will be communicated as appropriate.

Contact

Questions or requests: support@c2stream.com — C Squared Intelligence Technologies.