Privacy Policy

What Schmooze Is

Schmooze is a networking outreach platform that helps college students find relevant professionals, generate personalized emails, and send outreach directly from their own Gmail inbox.

Information We Collect

When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We use this information to create and authenticate your Schmooze account.

When you connect your Gmail account for sending, we request the gmail.send scope. This allows Schmooze to send emails on your behalf. We do not request or use any scope that would allow us to read, modify, or access the contents of your inbox.

We also collect information you provide directly: your profile details (name, school, title, extra context), email templates, resume text (if uploaded), and search queries. This information is used to personalize your outreach emails.

How We Access and Use Google User Data

Schmooze accesses Google user data through OAuth 2.0 in two ways:

• Authentication: We use Google Sign-In to verify your identity and create your account. We receive your name, email address, and profile picture.
• Email sending: When you choose to connect Gmail, we use the gmail.send scope to send emails that you have composed and reviewed within Schmooze. Each email is sent from your own Gmail address, using your name as the sender. We do not send emails without your explicit action.

We do not use Google user data for advertising, retargeting, or any purpose other than providing Schmooze's core functionality.

Data Storage and Security

Your data is stored in a Supabase-hosted PostgreSQL database with row-level security policies. Google OAuth tokens (access and refresh tokens) are encrypted at rest using AES-256 encryption before being stored in our database. We do not store the content of emails after they are sent through Gmail.

Your Google account credentials are handled entirely through Google's OAuth 2.0 protocol. We never see or store your Google password.

Data Sharing

We do not sell, trade, rent, or transfer your personal information or Google user data to third parties. We do not use your data for advertising purposes.

We use the following third-party services to provide Schmooze's functionality:

• Supabase: Database hosting and authentication infrastructure.
• Stripe: Payment processing for subscriptions. Stripe receives your payment information directly; we do not store credit card details.
• Anthropic (Claude): AI-powered email personalization. We send recipient profile data and your template to generate personalized email content. No Google user data is sent to Anthropic.
• Exa: People search functionality. Search queries are sent to Exa to find matching profiles. No Google user data is sent to Exa.

We may disclose information if required by law, such as in response to a subpoena or court order.

Google API Services User Data Policy

Schmooze's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Retention and Deletion

We retain your account data for as long as your account is active. You can request deletion of your account and all associated data by contacting us at the email address below.

You can revoke Schmooze's access to your Google account at any time through your Google Account permissions page. You can also disconnect your Gmail account from within Schmooze's Settings page at any time.

Cookies

Schmooze uses essential cookies for authentication and session management. We do not use tracking cookies, analytics cookies, or advertising cookies.

Changes to This Privacy Policy

We may update this privacy policy from time to time. If we make material changes, we will notify you through the Schmooze application or by email. Your continued use of Schmooze after changes are posted constitutes acceptance of the updated policy.

Contact

If you have questions about this privacy policy or your data, contact us at ysallam64@gmail.com.