Privacy Policy

1. Introduction

ACinch, LLC ("ACinch", "Company", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you use the ACinch platform and related services (collectively, the "Service").

By accessing or using the Service, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our policies and practices, please do not use the Service. This Privacy Policy may change from time to time, and your continued use of the Service after we make changes is deemed acceptance of those changes.

The Service is currently available to users in the United States and Canada. We do not currently offer the Service to residents of the European Union or European Economic Area.

2. Information We Collect

We collect information in several categories when you interact with our Service:

• Account Information: When you create an account, we collect your name, email address, password (stored in hashed form), company name, department, and job title.
• Profile Information: You may choose to provide additional profile information such as a profile photo, display name, timezone preferences, and notification settings.
• Integration Data: When you connect third-party services (such as Gmail, Slack, Microsoft Teams, GitHub, or Jira), we access and process data from those services, including messages, calendar events, activities, and notifications, to provide unified views within the Service.
• Usage Data: We automatically collect information about how you interact with the Service, including pages visited, features used, actions taken, timestamps, and session duration.
• Device and Technical Data: We collect technical information including your IP address, browser type and version, operating system, device identifiers, and referring URLs.
• Payment Information: When you subscribe to a paid plan, payment information is collected and processed by our third-party payment processor. We do not store your complete credit card number or banking details on our servers.
• Communications: If you contact us for support, provide feedback, or participate in surveys, we collect the content of those communications along with your contact information.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide, operate, and maintain the Service, including processing your integrations and displaying unified activity feeds
• To process transactions and manage your subscription
• To send you service-related communications, including account verification, technical notices, security alerts, and support messages
• To personalize and improve your experience with the Service
• To provide customer support and respond to your inquiries
• To monitor and analyze usage trends and preferences to improve the Service
• To detect, prevent, and address technical issues, fraud, and security concerns
• To enforce our Terms of Service and comply with legal obligations
• To send you marketing communications about new features, products, or services, where you have opted in to receive such communications

4. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information to third parties. We may share your information in the following circumstances:

• Service Providers: We share information with third-party vendors who assist us in operating the Service, including cloud hosting providers (Supabase, Vercel), our AI provider (Anthropic), payment processors, email delivery services, and analytics providers. These providers are contractually obligated to use your information only to perform services on our behalf. The full list is on our Subprocessors page.
• Legal Requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business Transfers: In the event of a merger, acquisition, reorganization, bankruptcy, or sale of all or a portion of our assets, your information may be transferred as part of the transaction. We will notify you of any such change in ownership or control of your personal information.
• With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.
• Aggregated or De-Identified Data: We may share aggregated or de-identified information that cannot reasonably be used to identify you, for industry analysis, research, or other purposes.

5. Data from Third-Party Integrations

When you connect third-party services to ACinch, we access data from those services solely to provide the core functionality of the Service. This includes retrieving messages, calendar events, project updates, code activities, and other information relevant to your unified dashboard.

Integration data is processed and stored in accordance with this Privacy Policy. We do not use integration data for advertising purposes or share it with unrelated third parties. You can disconnect any integration at any time through your account settings, which will stop further data retrieval from that service. Disconnecting also deletes the data previously retrieved from that service, except for backup copies as described in Section 7.

Your use of third-party services is governed by their respective terms of service and privacy policies. We encourage you to review those policies before connecting any integration.

5.1 Google User Data

This section describes how ACinch accesses, uses, stores, and shares data received from Google APIs when you sign in with Google or connect Gmail, Google Calendar, Google Tasks, or Google Drive. Each Google service is connected separately, and only when you choose to connect it.

• Sign in with Google: your name, email address, and profile photo, used to create and identify your ACinch account.
• Gmail: we read your messages, labels, and attachments so you can read and search your email in ACinch, and we send email only when you write it and press Send, including replies within the original conversation. ACinch never modifies, archives, or deletes anything in your Gmail.
• Google Calendar: we read the list of your calendars so you can choose which ones to sync, and we read and update events on the calendars you select so you can view, create, edit, delete, and respond to events. ACinch never creates or deletes calendars themselves.
• Google Tasks: we read your task lists and tasks, and create, edit, and complete tasks when you do so in ACinch.
• Google Drive (read-only): we list your recently changed files and shared drives for your activity feed, and search your Drive when you use ACinch search. ACinch never creates, edits, or deletes Drive files.

AI assistant: if the assistant (Ac) is turned on, it prepares a daily briefing using limited metadata only: the title, time, and organizer of calendar events; for a subset of email conversations selected by ACinch's labels, the subject, the sender's name (or the sender's email address when no name is available), and the time; and the names of recently changed Drive files. Email bodies, attachments, event descriptions, and file contents are never sent. This metadata is processed by our AI provider, Anthropic, solely to produce your briefing, and is not used to train AI models. You can turn the assistant off at any time in Settings, after which none of your data is sent to the AI provider.

We do not sell Google user data, use it for advertising, use it to train generalized AI or machine-learning models, or transfer it to data brokers. We transfer Google user data to others only as necessary to provide or improve the features you use, to comply with applicable law, to protect security, or as part of a merger or acquisition with notice to you. Our personnel do not read your Google user data unless you give us permission for specific data, it is necessary for security purposes such as investigating abuse, or it is required by law.

Google user data is encrypted in transit and at rest. When you disconnect a Google service in ACinch, we delete our stored access tokens for that service and the data we synced from it; your other connected services keep working. You can also remove ACinch's access at any time from your Google Account at https://myaccount.google.com/permissions.

ACinch's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.

6. Data Security

We implement commercially reasonable technical and organizational measures designed to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS/SSL protocols
• Encryption of data at rest using industry-standard encryption algorithms
• Regular security assessments and vulnerability testing
• Access controls and authentication mechanisms to limit access to personal information to authorized personnel
• Secure software development practices and code review processes

While we strive to use commercially reasonable means to protect your personal information, no method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your information. If you have reason to believe that your interaction with us is no longer secure, please contact us immediately at security@acinch.com.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:

• Account Data: Retained for the duration of your active account. When you delete your account (in Settings → Security and privacy, or by asking us at support@acinch.com), it is deleted immediately. There is no recovery period, and a deleted account cannot be restored
• Integration Data: Retained for the duration of your active account. Data retrieved from an integration is deleted when you disconnect that integration
• Usage and Analytics Data: Retained at the event level (pseudonymized, as described in Section 16) for up to one hundred eighty (180) days, after which it is aggregated into summaries that do not identify you
• Payment Records: Invoices and billing records, including the customer record held by our payment processor, Stripe, are kept after account deletion for at least seven (7) years, as required by applicable tax and financial reporting laws
• Support Communications: Retained for up to thirty-six (36) months after resolution
• Lapsed Plans: If your plan lapses, your account becomes read-only (see Section 6 of the Terms of Service). Ninety (90) days after the plan lapses, we delete your account data. We email you 30 days and again 7 days before that happens, and until then you can export your data or subscribe again
• Security Audit Logs: Records of security events, such as sign-ins and account deletions, are kept for up to twelve (12) months for security and fraud investigation, including after your account is deleted. When you delete your account, your user ID is removed from these records

When your data is no longer needed, we securely delete or anonymize it. Deleted data remains in backups until they roll off: daily database backups are kept for seven (7) days and encrypted database dumps for thirty-five (35) days. We restore backups only for disaster recovery, never to bring back a deleted account.

8. Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. We respect and support the following rights for all users:

• Right to Access: You may request a copy of the personal information we hold about you
• Right to Correction: You may request that we correct any inaccurate or incomplete personal information
• Right to Deletion: You can delete your account at any time in Settings → Security and privacy, or ask us to delete your personal information. Deletion is immediate, subject to the retention described in Section 7 and certain legal exceptions
• Right to Data Portability: You can export your data in Settings → Security and privacy. We prepare a ZIP file in commonly used, machine-readable formats and let you know when it is ready; each download link is valid for five (5) minutes, and the file is deleted after seven (7) days
• Right to Object: You may object to certain processing of your personal information, such as marketing communications
• Right to Withdraw Consent: Where processing is based on your consent, you may withdraw that consent at any time

To exercise any of these rights, please contact us at support@acinch.com. We will respond to your request within thirty (30) days. We may need to verify your identity before processing your request. We will not discriminate against you for exercising any of these rights.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) and the California Privacy Rights Act (CPRA):

• Right to Know: You may request information about the categories and specific pieces of personal information we have collected about you, the sources of collection, the business purposes for collection, and the categories of third parties with whom we share it
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions
• Right to Opt-Out of Sale: We do not sell your personal information. If this practice changes, we will provide a "Do Not Sell My Personal Information" link and update this policy
• Right to Non-Discrimination: We will not deny you the Service, charge you different prices, or provide a different quality of service because you exercised your privacy rights

To submit a request under the CCPA/CPRA, please email support@acinch.com with the subject line "California Privacy Request". We may need to verify your identity before processing your request. You may also designate an authorized agent to submit requests on your behalf.

10. International Data Transfers

The Service is operated from the United States. If you are accessing the Service from outside the United States, please be aware that your information will be transferred to, stored, and processed in the United States, where our servers are located and our central database is operated.

The data protection and privacy laws of the United States may differ from the laws of your jurisdiction. By using the Service, you consent to the transfer of your information to the United States and acknowledge that your information will be subject to United States law. The Service is currently available to users in the United States and Canada.

11. Children's Privacy

The Service is not directed to individuals under the age of sixteen (16). We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16 without verification of parental consent, we will take steps to delete that information promptly.

If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at support@acinch.com so that we can take appropriate action.

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to collect and track information about your use of the Service. Cookies are small data files stored on your device that help us improve the Service and your experience. We use the following types of cookies:

• Essential Cookies: Required for the Service to function properly, including authentication, session management, and security. These cookies cannot be disabled.
• Preference Cookies: Store your settings and preferences, such as language selection, theme, and timezone, to provide a personalized experience.
• Analytics Cookies: Help us understand how users interact with the Service by collecting information about pages visited, features used, and navigation patterns. This data is used to improve the Service.

Most web browsers allow you to control cookies through their settings. You can set your browser to refuse all cookies or to indicate when a cookie is being sent. However, disabling essential cookies may affect your ability to use certain features of the Service. For product analytics, we honor browser Do Not Track (DNT) signals as described in Section 16. Because essential and preference cookies are necessary to operate the Service and remember your choices, DNT signals do not disable them.

13. Third-Party Services

The Service uses the following categories of third-party service providers to operate and improve the platform (the full list, with the data each one receives, is on our Subprocessors page):

• Cloud Infrastructure and Hosting: Supabase (database and authentication), Vercel (application hosting and deployment)
• Payment Processing: Stripe (payment processing and subscription management)
• Communication: Email delivery services for transactional notifications and account communications
• Analytics: Usage analytics tools to understand how the Service is used and to identify areas for improvement

The Service may contain links to third-party websites or services that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party websites or services. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Service.

14. Data Breach Notification

In the event of a data breach that compromises the security or integrity of your personal information, we will:

• Investigate the breach promptly and take steps to contain it
• Notify affected users without unreasonable delay, and no later than required by applicable law
• Provide information about the nature of the breach, the types of data affected, and the steps we are taking to address it
• Notify relevant regulatory authorities as required by applicable law
• Offer guidance on steps you can take to protect yourself

If you believe your account has been compromised, please contact us immediately at support@acinch.com.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. If we make material changes, we will provide notice by posting the updated policy on our website and updating the "Last updated" date at the top of this page. For material changes that significantly affect your rights, we will also notify you by email or through a prominent notice within the Service.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after any changes to this Privacy Policy constitutes your acceptance of the revised policy.

16. Usage Analytics and Service Improvement

We collect analytics about how the Service is used so that we can understand what is working, fix problems, and improve features. This includes events such as which items you open, star, snooze, or dismiss in your activity feed, which features and pages you use, and the timing of those actions.

This usage analytics is pseudonymized and content-free. Before an event is stored, it is stripped of directly identifying details and linked only to a non-reversible identifier derived using a secret key. It never includes the contents of your messages, emails, files, calendar entries, or other integration data, and we do not use it to identify you.

We use this de-identified usage analytics to operate and improve the Service, to understand usage trends, and to develop, train, and evaluate automated and machine-learning features — for example, ranking and prioritizing the items shown in your feed so that the most relevant information appears first. We do not train these models on the contents of your messages, files, or other integration data.

• Opt out: you can turn off usage analytics at any time in your account settings. When you opt out, we stop collecting these analytics events for your account.
• Do Not Track: if your browser sends a Do Not Track (DNT) signal, we treat it as a request to stop collecting product analytics.
• Retention: event-level analytics that do not identify you are retained for up to 180 days, after which they are aggregated into non-identifiable summaries.
• Performance measurement: we separately use a privacy-focused tool (Vercel Web Analytics) to measure page performance, such as load times. It is aggregate and does not identify you.

Opting out of usage analytics does not affect the essential functionality of the Service.

17. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@acinch.com (privacy requests and questions); security@acinch.com (security reports)
• Phone: +1 (925) 285-0076
• Mail: ACinch, LLC, 1712 Pioneer Ave, Suite 500, Cheyenne, WY 82001, United States