Privacy Policy

Last updated: 2026-05-06

This Privacy Policy explains what data SoloCrew collects, how it uses Google user data, and the choices you have. SoloCrew is operated by SoloCrewBiz. Contact: admin@solocrewbiz.com.

Plain-language summary of Gmail use SoloCrew connects to Gmail only to send emails you explicitly approve. SoloCrew does not read your inbox, does not scan Gmail messages, and does not send emails automatically. OAuth tokens are stored encrypted at rest. You can disconnect Gmail at any time and your tokens are revoked and removed.

1. What SoloCrew is

SoloCrew is a business workflow assistant that helps founders, builders, and skill-based professionals turn a project or prototype into a structured market-and-outreach plan. After you generate a proposal in the app, you can optionally connect Gmail to send outreach emails to contacts you provide — one message at a time, only after your explicit approval.

2. Information SoloCrew collects

Account information

When you sign in to the SoloCrew app at app.solocrewbiz.com, we receive your name and email address from your authentication provider. This is used to identify your workspace and to send transactional notifications (for example, email-based magic links to log in).

Project content you provide

When you submit a project in the app, we store the project name, description, optional URL (such as a public GitHub repository or a public website), and your selected report language and target market. This content is used to generate your Revenue Proposal and is stored in your private workspace.

Outreach drafts and recipients you provide

If you create an outreach campaign, we store the recipient email addresses you enter, the buyer-path label you select, and the message drafts SoloCrew prepares. We store an audit log entry every time you approve a draft, every time you click "Send approved", and every send attempt — including its outcome.

Gmail account information (only when you connect Gmail)

When you choose to connect Gmail, SoloCrew receives:

Your verified Gmail address (so we can show "Connected as <your address>").
An OAuth access token and refresh token that allow the gmail.send scope only. These tokens are encrypted at rest and never logged in plaintext.
The list of granted scopes returned by Google during consent.

3. How SoloCrew uses Google user data

Gmail send permission only

SoloCrew only requests the https://www.googleapis.com/auth/gmail.send scope, plus OpenID Connect basics (openid, email) so we can identify the connected mailbox. SoloCrew does not request any inbox-read, mailbox-modify, or full-mail-access scope.

No inbox read, no Gmail scanning

SoloCrew never reads your Gmail inbox, your sent items, your drafts, your labels, your contacts, or your message metadata. SoloCrew does not run any background process that scans Gmail content. The Gmail connector exists exclusively to deliver outreach emails you approve, one at a time.

No automatic sending

Every outreach send requires your explicit, per-message approval inside the app. After approval, sending only happens when you click "Send approved" and confirm a final dialog. There is no scheduler, no background sender, no auto-reply, and no hidden follow-up.

Use of Google user data is limited to the user-facing feature

The Gmail address and tokens you grant SoloCrew are used solely to deliver the outreach emails you approve from your own SoloCrew workspace. They are not used for any other purpose.

4. How SoloCrew does NOT use Google user data

SoloCrew does not sell, trade, or rent your Google user data to anyone.
SoloCrew does not share your Google user data with advertisers or for any advertising purpose.
SoloCrew does not use your Google user data to serve ads.
SoloCrew does not use your Google user data to train machine-learning or AI models.
SoloCrew does not read, scan, index, or analyze your Gmail messages, inbox, drafts, contacts, or metadata.

5. How SoloCrew stores and protects data

OAuth tokens are encrypted at rest using AES-256-GCM with an application-managed key. Tokens are never stored or logged in plaintext.
Project content, outreach drafts, and recipient lists are stored in our managed database with row-level security so that only your authenticated session can read your own rows.
Transit between your browser, our servers, and Google APIs is encrypted using TLS.
Every send attempt — including approvals, blocks, successful sends, and provider errors — is recorded in an append-only audit log, so you can verify what happened on your behalf.

6. Disconnecting Gmail

You can disconnect Gmail at any time from the SoloCrew app. When you disconnect:

SoloCrew calls Google's revoke endpoint with your tokens.
Your encrypted access and refresh tokens are removed from our database.
The connector status flips to "disconnected" and no further sends are possible until you reconnect.

7. Data retention

Project content, proposals, and outreach drafts you create are retained while your account is active so you can return to them. You may delete your project content from inside the app. Audit-log entries for approve/send events are retained for as long as you keep the parent project, to provide an honest record of what was sent.

8. Third parties SoloCrew uses

SoloCrew uses the following service providers to operate the product:

Hosting: a managed Next.js hosting provider that serves the app and this site.
Database: a managed Postgres provider with row-level security and TLS-encrypted transport.
Authentication: the same managed provider, for sign-in only.
External market research: an independent research provider used to gather public market signals during proposal generation. This provider does not receive your Gmail data.
LLM provider: Anthropic, used to generate the structured Revenue Proposal text. The LLM provider does not receive your Gmail tokens or your inbox content (because SoloCrew never reads your inbox in the first place).

These providers act as data processors under our instructions and are bound by their own privacy and security commitments.

9. Your rights

You can request access to your stored data, deletion of your stored data, or a copy of your stored data by writing to admin@solocrewbiz.com. We respond to good-faith requests within a reasonable timeframe.

10. Changes to this policy

We will update this page when our practices change. The "Last updated" date at the top of this page reflects the most recent change. Material changes that affect Gmail-related data will be announced inside the app before they take effect.

11. Contact

Questions or requests: admin@solocrewbiz.com.