Privacy Policy
Last updated: July 6, 2026
What we collect
When you connect Square or upload a spreadsheet, we store your customers' names, email addresses, and purchase history (dates and amounts) — nothing else. The free browser audit stores nothing: your file is processed entirely on your device and never uploaded.
How we use it
Exclusively to run your win-back program: detecting which of your customers have gone quiet, sending the emails you approved, and reporting results back to you. We never sell data, never share it with third parties beyond the processors below, and never contact your customers for our own purposes.
Processors we rely on
Neon (database hosting), Vercel (application hosting), Resend (email delivery), Stripe (billing), Square (when you connect it — read-only access), and Anthropic (one-time email drafting at setup; no customer data is sent). Each processes data only on our instructions.
Your customers' rights
Every email we send includes a one-click unsubscribe honored immediately and permanently. Suppressed addresses are never contacted again.
Your rights
Delete everything at any time from Settings → Disconnect & delete: your business, customer list, purchase history, and all records are permanently removed. You can also request deletion or a copy of your data by replying to any Comeback Pilot email.
Security
Data is encrypted in transit (TLS) and at rest; Square access tokens are additionally encrypted at the application layer. Access is limited to what operating the service requires.
Contact
Reply to any Comeback Pilot email and a human reads it.