Stowdar

Privacy Policy

Last updated: July 4, 2026

This Privacy Policy explains what information Stowdar ("Stowdar," "we," "us," or "our") collects and does not collect when you use the Stowdar software and related services (the "Service"). It should be read together with our Terms of Service.

Stowdar is software that you deploy and run inside your own Google Cloud environment. Once deployed, it connects to your own Google account (such as Gmail, Google Drive, Google Docs, Google Calendar, and Google Tasks), uses an artificial-intelligence provider (currently Anthropic) through your own API key to read and organize your correspondence and files, and writes the results back into your own Google Drive.

Your content stays with you. Your email, attachments, documents, contacts, calendar entries, folder names, and Document contents are processed inside your own Google Cloud environment and written back into your own Google Drive. Stowdar never receives, stores, or has access to that content.

1. Information we collect

The only information that reaches us is limited to what is needed to run the business and maintain the software:

Account and billing information — such as the email address and subscription status associated with your license, handled through our payment processor, Lemon Squeezy. We do not receive or store your full card details.
License and seat validation data — when the Service checks your license and enforces your plan's seat limit, it sends your license key, a per-deployment identifier (derived from your cloud project, not from your identity), your software version, and a one-way salted hash of your connected Google account address. The hash is used only to enforce your seat limit and to let you reclaim your seat if you redeploy or reconnect; we do not receive your actual connected email address.
Anonymized, content-free usage data — a record of which features ran and how often, along with non-content labels such as feature, template, section, and rule identifiers, counts, and the software version, tagged with a random identifier that is derived from nothing and cannot be linked to you. This data is stripped of anything resembling content: message text, subject lines, names, email addresses, file contents, and similar fields are never included, and long values are truncated so content cannot travel with it. It cannot be used to identify you or to reconstruct your content.

2. Information we never collect

Your email messages, subjects, or headers
Attachments or Google Drive file contents
Folder names or Google Document contents
Your contacts, calendar entries, or tasks
The people, companies, or projects you choose to track

3. Content sent to your AI provider

To do its work, the Service sends relevant content to the AI provider you configure (currently Anthropic), using your own API key. This includes information from your connected accounts and anything you type into the Service, such as a search that contains a client's name or project details. That content is sent to and processed on your AI provider's systems and is governed by your own agreement with that provider, not by us. This happens even though Stowdar itself never receives, stores, or controls that content. You are responsible for any rights, permissions, or consents needed to send information about your own clients, customers, employees, or other third parties to your AI provider.

4. How we handle your Google data

Stowdar's use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. The Service accesses your Google data solely to provide the features you use within your own environment. We do not sell your Google data, transfer it to third parties, or use it for advertising, retargeting, or credit or lending decisions.

5. How your data is used and stored

In your own environment: your Google authorization, the senders and projects you track, your folder map, refresh state, and your content all live in your own Google Cloud project and your own Google Drive. They are never transmitted to us.
On our backend: our licensing service (hosted on Supabase) stores only your license record, the per-deployment identifier and the one-way hash of your connected account used for seat enforcement, and content-free usage metadata. It is used solely to operate your subscription and to maintain and improve the Service's organizing rules and templates.

6. Third-party services

Google (Gmail, Drive, Docs, Calendar, Tasks) — accessed through your own Google OAuth application and account, governed by Google's Privacy Policy. Stowdar reads and files within your account on your behalf and never routes that content through our servers.
Anthropic — the Service uses your own Anthropic API key to process content, governed by Anthropic's Privacy Policy.
Lemon Squeezy — processes subscription payments under its Privacy Policy. Our backend receives only the resulting license and subscription status (for example, active, plan, add-on), never your card details.

We do not sell your data, and we do not share it with third parties for advertising.

7. Your consent to anonymized data collection

By accepting our Terms of Service and using the Service, you consent to our collection, storage, and use of the anonymized, content-free usage data described above. We use it solely to operate, maintain, secure, troubleshoot, and improve the Service, including refining the shared rules and templates that benefit all users. Because this data is anonymized and content-free, it does not identify you and does not include any content from your connected accounts.

8. Data retention

The data in your own Google Cloud and Google Drive stays under your control and remains until you remove it or revoke Stowdar's access in your own account. Backend records (your license, the seat-enforcement identifiers, and content-free usage metadata) are retained for the life of the license and may be deleted on request.

9. Your choices

You control which Google account is connected and which senders and projects are tracked, and you can revoke Stowdar's access at any time in your own Google account.
You can shut down or delete your own Stowdar deployment and its data in your own Google Cloud at any time.
You can request deletion of your backend license and usage records by contacting us.

10. Children

The Service is intended for business and professional use and is not directed to, or intended for use by, anyone under 18. It is not directed to children, and we do not knowingly collect information from anyone under 13.

11. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page.

12. Contact

Questions or data requests: hello@stowdar.com.