Privacy Policy
Last updated: October 15, 2026
RetainChase ("we") helps commercial trade subcontractors draft and send payment follow-ups. This policy explains what we collect and how we use it.
What we collect
- Account details: email address, company name, your name, reply-to email, and a hashed password.
- Job data you enter or upload: general contractor names and contact emails, project names, invoice / pay app numbers, amounts, dates, and follow-up drafts. Uploaded PDFs are processed to extract these fields and are not kept.
- If you connect a mailbox: an OAuth access/refresh token and your mailbox address, stored encrypted (AES-256-GCM).
- Billing details are handled by Stripe; we never see or store full card numbers.
How we use it
- To show your dashboard, generate follow-up drafts, and — only when you click Send — send the exact message you approved.
- Draft text may be generated by an AI model through our hosting provider's AI gateway. Your data is not used to train models by us.
- We do not sell personal data or use it for advertising.
Google and Microsoft data
If you connect Gmail, RetainChase requests only the gmail.send permission, used solely to send messages you have approved, from your account, at your click. We cannot read, list, or delete your email. RetainChase's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The same limits apply to Microsoft's Mail.Send permission. Google/Microsoft user data is never transferred to third parties except as needed to send your message, never used for advertising, and never read by humans except with your permission, for security, or as required by law. You can disconnect at any time in Settings, which deletes the stored token.
Sharing
We use service providers to run RetainChase: Vercel (hosting, storage, AI gateway), Stripe (billing), and Resend (email delivery when you send through RetainChase). They process data only on our behalf.
Retention and deletion
Your data is kept while your account is open. Delete your account from the Billing page to permanently remove your account, jobs, drafts, and any stored mailbox token.
Security
Data is transmitted over HTTPS. Passwords are hashed with bcrypt; mailbox tokens are encrypted at rest.
Contact
Questions or requests: support@retainchase.com.
