Privacy policy

Last updated: July 28, 2026

What UserGetter stores

We store account details, product workspaces, prospect records you provide or approve for import, campaign activity, and security audit events so the service can operate across your devices.

Acquisition and activation measurement

When your product reports a signup, activation, or retention event, UserGetter transforms the supplied internal user ID or email with a secret, product-specific hash before storage. The raw identifier is not stored in the event record and hashes cannot be correlated across products. When a person follows a UserGetter acquisition link, we set a secure, HTTP-only, same-site visitor cookie that expires after one year. A secret, product-specific hash of its random identifier is used to count lifetime unique visitors across that product's campaign links. The cookie is not available to page scripts, and UserGetter does not store raw IP addresses or user-agent strings in the click ledger. Recognized bots and link-preview requests are excluded. These records are used only for aggregate experiment and cohort measurement.

Google user data

If you choose to connect Gmail, UserGetter requests the minimum permission needed to send founder-approved messages from your account. We do not request permission to read your inbox. Refresh tokens are encrypted at rest, never exposed to the browser, and used only to provide the email-sending feature you initiate.

How data is used

Your information is used only to provide and secure UserGetter's user-facing product features. We do not sell Google user data or prospect data, use it for advertising, or allow humans to read it except when you explicitly request support, when necessary to investigate abuse, or when legally required.

Your control

You can disconnect Gmail, export your workspace, suppress a contact, or request deletion of your account and stored data. Disconnecting stops future Gmail access.

Contact

For privacy or deletion requests, contact the UserGetter operator through the support address shown in your account or OAuth consent screen.