Privacy Policy

We collect the following types of information:

• Account Information: Email address, name, and other information you provide during registration
• Gmail Thread Content: Full email threads when you use the compose feature to generate AI-powered responses
• Usage Data: Draft count, feature usage statistics, and interaction patterns with our service
• Technical Data: Browser type, device information, IP address, and other technical identifiers
• Analytics Data: Behavioral analytics and usage tracking collected via Segment

We use the collected information for the following purposes:

• To provide and maintain our AI-powered email composition service
• To manage and enforce usage limits (including the 20 draft limit tracking)
• To authenticate and secure your account
• To improve service performance, reliability, and user experience
• To communicate service updates and important information (if you have opted in)
• To detect, prevent, and address technical issues and security threats

We share your data with the following third-party services:

• OpenAI API: Email thread content and user prompts are sent to OpenAI for AI processing. OpenAI retains this data for a maximum of 30 days and does not use it for model training. Data is processed in the United States.
• LangSmith (LangChain): Full conversation and email content is logged to LangSmith for debugging and service improvement purposes. LangSmith automatically deletes this data after 14 days. Data is processed in the United States.
• Segment Analytics: We use Segment to collect behavioral analytics and usage tracking data to understand how our service is used and to improve it.
• Google APIs: We integrate with Google APIs to read email threads from your Gmail account when you use the compose feature. This integration is subject to Google's privacy policies.

Important: All third-party services mentioned above are based in the United States. By using our service, you acknowledge that your data may be transferred to and processed in the United States.

• Account Data: Your account data is stored in MongoDB (US region) and retained until you delete your account.
• Account Deletion: Upon account deletion, your data is immediately removed from our MongoDB database.
• Third-Party Retention:
  • OpenAI: Maximum 30 days (automatic deletion)
  • LangSmith: Maximum 14 days (automatic deletion)
• Note: Data stored with third-party services cannot be manually deleted by us, but it automatically expires according to the retention policies stated above.

If you are located in the European Economic Area (EEA) or United Kingdom, you have the following rights regarding your personal data:

• Right to Access: You have the right to request access to your personal data that we hold.
• Right to Deletion: You have the right to request deletion of your account and associated personal data.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Withdraw Consent: You have the right to withdraw your consent to data processing at any time.
• Right to Object: You have the right to object to the processing of your personal data in certain circumstances.
• Right to Lodge a Complaint: You have the right to lodge a complaint with a supervisory authority if you believe your data protection rights have been violated.

To exercise any of these rights, please contact us at: michael.svr@gmail.com

We implement appropriate technical and organizational measures to protect your personal data:

• Data encryption in transit using HTTPS/TLS protocols
• Secure authentication via Better Auth
• Access controls and authentication requirements
• Regular security assessments and updates

Beta Service Notice: Composer AI is currently in beta. While we implement security best practices, we are continuously improving our security measures. We recommend that you do not use this service for highly sensitive or confidential communications.

Your personal data is processed in the United States. If you are located outside the United States, including in the European Union or Poland, your data will be transferred to and processed in the United States.

We ensure that appropriate safeguards are in place for such transfers, including standard contractual clauses where applicable, to protect your personal data in accordance with applicable data protection laws.

We use the following types of cookies and tracking technologies:

• Authentication Cookies: Essential cookies for maintaining your login session
• Session Management: Cookies that help manage your session and preferences
• Analytics Tracking: We use Segment Analytics to track usage patterns and improve our service

You can control cookies through your browser settings. However, disabling certain cookies may affect the functionality of our service.

Composer AI is restricted to users who are 18 years of age or older. We do not knowingly collect personal information from individuals under 18 years of age. If we become aware that we have collected personal information from a minor, we will take steps to delete such information promptly.

We reserve the right to update this Privacy Policy at any time. We will notify you of any material changes by updating the "Last Updated" date at the top of this page or by sending you an email notification.

Your continued use of Composer AI after any changes to this Privacy Policy constitutes your acceptance of the updated policy. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: michael.svr@gmail.com
• Service Operator: Composer AI (individual operator, Poland)