Privacy Policy

TroveApp is a B2B cold-outreach platform operated by TechCarrel. It lets you import a list of prospects, generate a personalized email for each, send those emails through Gmail mailboxes you connect, and run automated follow-ups. For any privacy question or request, contact us at gaurav@techcarrel.com.

• Account information. The email address you use to sign in (via one-time passcode) and basic authentication records.
• Google account information. When you connect a Gmail mailbox, we receive your Google account email address and OAuth authorization credentials (access and refresh tokens) for the mailbox you connect.
• Gmail content. To run your campaigns we send messages from your mailbox and read messages on the email threads TroveApp started, so we can detect and display replies.
• Campaign data you provide. Prospect details you upload (such as names and email addresses), your offer/service description, email content, mailbox settings, and sending schedules.
• Engagement and usage data. Email opens, link clicks, replies, bounces, unsubscribes, and related activity used to power analytics and follow-up decisions.

When you connect a Gmail mailbox, TroveApp requests the following Google API scopes and uses the resulting access strictly to operate the features you set up:

• See your primary Google Account email address (userinfo.email) — to identify the connected mailbox and show you which account is linked.
• Send email on your behalf (gmail.send) — to dispatch your campaign emails and threaded follow-ups from your mailbox.
• View your email messages and threads (gmail.readonly) — to read incoming messages only on the threads TroveApp started, so replies can be detected, surfaced in your unified inbox, and used to automatically stop following up with prospects who responded. TroveApp does not browse, search, label, modify, or delete your mail, and does not read messages outside the conversations it began.

We access only what these features require, and only while your mailbox is connected. We do not use Gmail data for advertising, and we do not sell it.

TroveApp’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not use Google user data for serving advertisements, we do not allow humans to read this data unless we have your affirmative consent, it is necessary for security purposes (such as investigating abuse), or to comply with applicable law, and we do not sell or transfer this data except as needed to provide or improve TroveApp, comply with law, or as part of a merger or acquisition.

To generate personalized emails and follow-ups, TroveApp sends the relevant prospect details and email content to third-party large-language-model providers — DeepSeek (primary) and Anthropic Claude (fallback). These providers process the content to return generated text. We do not send your Google OAuth credentials to these providers. We do not use Gmail message bodies for any purpose other than operating the features you configure.

• Google OAuth tokens are stored encrypted at rest and are never exposed in plain text.
• Application data is stored in a PostgreSQL database on a private server, accessible only to the service and authorized operators.
• Your sign-in session token is held in your browser’s local storage and used to authenticate requests.
• We apply reasonable technical and organizational measures to protect your data; however, no method of transmission or storage is completely secure.

We do not sell your personal data. We share data only with:

• Service providers that help us operate TroveApp — Google (Gmail API for sending and reading your campaign threads) and the AI providers named above — acting under our instructions.
• Legal and safety recipients, where required to comply with applicable law, enforce our terms, or protect the rights and safety of users.
• A successor entity in connection with a merger, acquisition, or asset sale, subject to this Policy.

We retain your data for as long as your account is active or as needed to provide the service. You can revoke TroveApp’s access to your Gmail at any time by disconnecting the mailbox inside the app, or from your Google Account → Security → Third-party access. Revoking access immediately stops further sending and reading from that mailbox. To request deletion of your account and associated data, email gaurav@techcarrel.com and we will delete it within a reasonable period, except where retention is required by law.

Depending on your location, you may have rights to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these, contact gaurav@techcarrel.com.

TroveApp uses browser local storage to keep you signed in and to remember interface preferences. We do not use third-party advertising or cross-site tracking cookies.

TroveApp is a business tool not directed to children. It is intended for users aged 18 or older, and we do not knowingly collect data from children.

We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above and, where appropriate, by additional notice. Continued use of TroveApp after changes take effect constitutes acceptance of the revised Policy.

Questions about this Privacy Policy or our data practices? Email gaurav@techcarrel.com (TechCarrel).