Privacy Policy

Last updated: May 2026  ·  Operator: JL Vijfkant 2009 S.L., Spain

Get Pro Tools (“we”, “our”, “us”) is operated by JL Vijfkant 2009 S.L., registered in Spain. This Privacy Policy explains what data we collect, why we collect it, how we protect it, and your rights under the General Data Protection Regulation (GDPR).

1. Data we collect

Account data

When you sign in with Google we receive your name, email address, and profile picture via Google’s OAuth identity flow (openid, email, profile scopes only). We store this in our database to identify your account.

Gmail data

If you choose to connect your Gmail inbox, we request the https://www.googleapis.com/auth/gmail.modify scope. This allows us to:

• Read email messages and thread context to understand what needs a reply
• Read verified send-as aliases so replies come from the correct address
• Create draft replies in your Gmail account
• Send replies that you have explicitly reviewed and approved
• Move messages to Trash (soft delete only) if you request it

We do not request https://mail.google.com/ and we do not permanently delete Gmail messages through the Gmail API.

Gmail OAuth tokens (access token and refresh token) are encrypted at rest using AES-256-GCM before being stored in our database. The encryption key is never stored alongside the tokens.

Usage data

We collect standard server logs and usage events (e.g. emails processed, drafts created) to operate the service, debug issues, and calculate billing where applicable.

Payment data

Payments are processed by Stripe. We do not store your card number, CVV, or bank details. We store only your Stripe customer ID and subscription status.

2. How we use Gmail data

Get Pro Tools’ use of Gmail data is limited to the following purposes:

• Reading relevant incoming emails to generate AI draft replies
• Reading thread context to produce accurate and coherent replies
• Identifying which send-as alias an email was received on, so replies come from the correct address
• Creating draft replies inside your Gmail account for your review
• Sending replies only after you have explicitly approved them

We do not use Gmail data for advertising. We do not sell Gmail data. We do not use Gmail data to train AI models. Gmail data is not shared with third parties except as described in the Subprocessors section below, and only to the minimum extent necessary to provide the service.

3. Google API Services — Limited Use disclosure

Get Pro Tools’ use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, data obtained from Google APIs is used only to provide and improve the features described in this Privacy Policy. It is not used for serving advertisements, for any purpose unrelated to the service, or transferred to third parties except as necessary to provide the service.

4. Data storage and security

All data is stored in the European Union. Our primary database runs on Supabase in the Frankfurt (eu-central-1) region. Our application is hosted on Vercel with EU-region deployments. All connections use HTTPS/TLS.

Gmail OAuth tokens are encrypted at rest using AES-256-GCM. The encryption key is managed separately from the token data and is never committed to source code or logs.

5. Subprocessors

We use the following third-party services to operate Get Pro Tools. Each subprocessor receives only the data necessary for its function. See our full Subprocessors page for details.

• Supabase — database (Frankfurt, EU)
• Vercel — application hosting
• OpenAI — AI draft generation (email content sent transiently for processing; not used for training)
• Stripe — payment processing
• Google — Gmail API, OAuth identity
• Loops.so — transactional and marketing email
• Sentry — error monitoring (no email body content logged)

6. Data retention

We retain your account data for as long as your account is active. If you close your account or request deletion, we will delete your personal data within 30 days, except where retention is required by law (e.g. billing records).

If you disconnect Gmail, your stored Gmail OAuth tokens are deleted immediately from our database. Any email content cached for processing is also deleted.

7. Disconnecting Gmail

You can disconnect your Gmail account at any time from the Account settings page inside the dashboard. Disconnecting immediately removes your OAuth tokens from our database and stops all Gmail API access. You can also revoke access directly from your Google Account at myaccount.google.com/permissions.

8. Your rights (GDPR)

Under GDPR you have the right to access, correct, export, restrict processing of, or delete your personal data. You also have the right to object to processing and to lodge a complaint with a supervisory authority.

To exercise any of these rights, email us at info@getpro.tools with the subject line “Data Request”. We will respond within 30 days.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or by a notice in the dashboard. Continued use of the service after notification constitutes acceptance of the updated policy.

10. Contact

JL Vijfkant 2009 S.L. — Get Pro Tools
Email: info@getpro.tools
Website: getpro.tools