Privacy Policy

1. Introduction

Welcome to Cluex. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you use our email clustering and AI management application.

2. Google API Services User Data Policy

Cluex's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

3. Information We Collect

When you authenticate using Google OAuth, we request access to the following scopes:

• Email Address and Basic Profile: To identify your account and authenticate you.
• Gmail Read Access: To fetch emails for clustering, summarizing, and presenting them in our dashboard.
• Gmail Send/Modify Access: To allow you to send replies or modify email states (e.g., mark as read) directly from our application.

4. How We Use Your Information (Including AI Processing)

We use your email data strictly to provide the core functionality of Cluex:

• Clustering & Organization: We analyze email metadata and content to group related emails into clusters.
• AI Processing (Gemini AI): We use Google's Gemini API to generate smart email replies and summarize clusters. When you request an AI reply, the specific email thread context is securely transmitted to the Gemini API.
• No AI Training: Your email content and personal data are NEVER used to train our AI models, nor are they used by Google or any third-party to train generalized AI models.

5. Data Retention and Security

We only store the minimum necessary email metadata required to maintain your dashboard state (such as thread IDs, subjects, and sender information). Full email bodies are fetched dynamically and cached securely. We employ industry-standard security measures, including at-rest encryption via Supabase and strict Row Level Security (RLS) policies, to ensure your data is accessible only to you. You may revoke access or delete your account at any time, which will result in the immediate deletion of your synced metadata.

6. Third-Party Services

To provide our service, we rely on trusted infrastructure providers: Supabase (database and authentication) and n8n (workflow orchestration). All data transfers are encrypted in transit, and these sub-processors are bound by strict confidentiality agreements. We never sell your personal data to advertisers or third parties.

7. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please contact us at privacy@cluex.app.