Privacy Policy

Last updated: 26 October 2026

AyePin helps a person find local businesses, draft a first message for each, and send only the messages they approve. This policy says what information the service handles, why, who can see it, and how to have it deleted. It applies to the website at ayepin.com and the application behind it.

1. What we collect

Your account: your name and email address, and a password hash if you sign up with a password. If you sign in with Google we receive your name, email address and Google account identifier (the OpenID Connect scopes openid, email and profile) and nothing else.

Your work in the service: the campaigns you create, the businesses found for them (public information: name, address, phone number, website, public email address, category, rating), your drafts and the messages you approve and send, replies you or the service record, notes, and your settings.

Technical data: a sign-in token and a language choice are kept in your browser; our servers keep standard logs (time, address, request) for security and to fix faults. We also use Google Analytics to count visits to the website: it sets cookies and receives the page address you open, your browser and device type and your approximate location. It is used to measure traffic only, not for advertising. You can refuse it in your browser settings or with Google's opt-out add-on at tools.google.com/dlpage/gaoptout.

2. The Gmail permission

Connecting Gmail is optional and is done by you, in Outbox, Gmail. We ask for one permission only: https://www.googleapis.com/auth/gmail.send. It lets AyePin send an email from your Gmail address after you have approved that message. It does not let us read, list, search or delete anything in your mailbox, and it gives no access to your contacts or your sent folder.

We store one thing from Google for this: a refresh token, encrypted at rest, kept only so approved messages can be sent. It is never shown in the browser. When you disconnect Gmail, or delete your account, the token is deleted. You can also remove the access at any time at myaccount.google.com/permissions.

AyePin's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide the sign-in and the sending feature you asked for. We do not sell it, use it for advertising, use it to train general AI models, or let people read it except where you ask for support or the law requires it.

3. How we use information

To run the service you asked for: sign you in, find and rank businesses, write drafts, send what you approve, show replies and follow-ups, and keep the do-not-contact list so that someone who asked to stop is not written to again. To protect the service from abuse and to fix problems. We do not use your data for advertising.

To write drafts, the relevant text (a business's public details, your offer and style notes) is sent to the AI provider configured for the service. That provider processes it to return a draft, under its own terms.

4. Who else receives it

We do not sell personal information. It is shared only with the providers needed to run the service: the hosting provider that stores it, Google Analytics for the visit counts described above, the AI provider named above, and the channel you choose for sending (Google for Gmail, your own mail server, WhatsApp or Telegram). We may disclose information where the law requires it or to protect the service and its users.

5. Keeping and deleting data

Your data is kept while your account is active. You can delete leads, drafts and campaigns in the application, disconnect Gmail at any time, and ask us to delete your account and its data; Contact us through the support address shown on the Google sign-in screen of this service. Backups are overwritten on a rolling basis.

6. People who are contacted through the service

If you received a message that was sent with AyePin, it was sent by one of our users, not by us. Every email carries an unsubscribe link and a postal address; use the link, or reply STOP to a WhatsApp or Telegram message, and that user can no longer contact you through the service. You can also ask us to delete what the service holds about your business; Contact us through the support address shown on the Google sign-in screen of this service.

7. Security

Traffic is encrypted with HTTPS, credentials such as the Gmail refresh token are encrypted at rest, and access to the servers is limited to the people who run the service. No system is perfectly secure; we will tell affected users if a breach affects their data, as the law requires.

8. Children

The service is for businesses and is not directed at anyone under 16.

9. Changes

If we change this policy in a way that matters we will update the date above and, for a material change, tell users in the application or by email.

10. Contact

Contact us through the support address shown on the Google sign-in screen of this service.