Privacy Policy

1. Information we collect

We collect the following information when you create an account and use our service:

• Account information. Your name, email address, and profile photo, provided when you sign in with Google.
• Profile information. Information you provide about yourself: your school, academic year, major, relevant coursework, research experience, skills, extracurricular activities, and any additional notes you choose to add. If you upload a resume, we store the PDF file and extract its contents to pre-fill your profile fields.
• Campaign data. The parameters you set when starting a campaign: your research interest, target university, position type, and scheduling preferences.
• Professor data. For each campaign, we store the AI-generated shortlist of professors, including their names, titles, departments, university, email addresses, research areas, and fit scores.
• Email records. The subject, body, and status of every email drafted or sent through Squibble, along with the Gmail message ID, Gmail thread ID, and timestamp of each sent email.
• Reply data. The body text of professor replies detected in your Gmail inbox that belong to Squibble email threads, along with a classification of each reply as positive or negative.
• Bounce records. If a sent email bounces, we record the bounce timestamp and whether a credit was automatically refunded.
• Gmail watch state. An opaque inbox history cursor used to track which Gmail inbox changes have already been processed, so we do not reprocess the same messages.
• Plan and credit data. Your current plan tier, your remaining search and send credits, and your Stripe customer ID.
• Purchase history. A record of each completed purchase, including the Stripe session ID, plan selected, credits granted, and purchase timestamp. This is used for payment idempotency.

2. How we use your information

• To authenticate you via Google Sign-In.
• To discover relevant professors: your campaign parameters and profile are sent to Claude (Anthropic's AI) to generate a ranked shortlist.
• To draft personalized outreach emails: your profile, the campaign context, and each professor's research summary are sent to Claude to write a tailored email for each professor.
• To send those emails through your Gmail account. If you have uploaded a resume, it is attached as a PDF to each outgoing email.
• To detect replies: we monitor your Gmail inbox via Google Pub/Sub. When a new message arrives, we check whether it belongs to a Squibble email thread and, if so, read its body and classify it as positive or negative using Claude.
• To detect bounced emails and automatically refund a credit when the bounce was caused by a bad address we sourced, within 48 hours of the original send.
• To display your campaign history, reply status, and usage statistics on your dashboard.
• To process one-time payments through Stripe.

We do not sell your data. We do not use your data for advertising.

3. Gmail data

Our use of Gmail data is strictly limited to operating Squibble on your behalf.

Scopes we request: gmail.send and gmail.readonly.

gmail.send is used to send emails to professors using your Gmail account as the sender.

gmail.readonly is used exclusively to monitor your inbox for activity related to Squibble campaigns. When Google notifies us of new inbox messages via Pub/Sub, we fetch the sender and subject of each message to screen for relevant activity, and fetch the full message body in three cases: (1) messages in a thread Squibble originally created, (2) bounce notification messages whose sender or subject indicates a mail delivery failure, and (3) messages from senders whose address matches a professor Squibble previously emailed, to capture replies sent in a fresh thread. We never read, index, store, or process any other emails in your Gmail account.

Your Gmail access token and refresh token are stored securely in our database. They are used only to call the Gmail API on your behalf and are never shared with any third party other than Google.

Our use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.

4. Data sharing

We share your data only with the following third parties, as necessary to operate the service:

• Anthropic. We use the Claude API to discover professors, draft emails, and classify replies. Your profile information, CV content, campaign parameters, professor research summaries, draft email content, and professor reply text are sent to Anthropic's API for these purposes. Anthropic's privacy policy governs their handling of API data.
• Supabase. We use Supabase to store your account, profile, campaign history, emails, replies, and Gmail watch state. Supabase is hosted on AWS infrastructure.
• Stripe. We use Stripe to process one-time payments. When you complete a purchase, we pass your Squibble account ID to Stripe for attribution. We do not store your payment card information.
• Google. Emails are sent via the Gmail API, and we receive inbox activity notifications via Google Pub/Sub. Google's privacy policy governs their handling of that data.

We do not share your data with any other third parties.

5. Data retention

We retain your data for as long as your account is active. You can delete your account at any time from the Settings page; this immediately and permanently removes your account and all associated data. You can also request deletion by emailing contact@squibble.pro.

6. Security

We take reasonable measures to protect your information. All data is transmitted over HTTPS. Data is stored with Supabase, which encrypts data at rest. Row-level security ensures that each user's data is accessible only to that user. Gmail credentials are stored server-side and never exposed to the browser or to other users. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Children's privacy

Squibble is not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us at contact@squibble.pro.

8. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting a notice on squibble.pro. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

If you have any questions about this Privacy Policy, please contact us at contact@squibble.pro.