privacy policy
last updated: may 2026
this privacy policy describes how dtcmvp ("we", "us", "our") handles user data collected through the dtcmvp chrome extension and related services. we are committed to protecting user privacy and limiting data collection to what is strictly necessary to provide the service.
google api services user data policy — limited usedtcmvp's use and transfer of information received from google apis to any other app will adhere to the google api services user data policy, including the limited use requirements.
what google permissions we request
during installation, the extension asks for your consent to a single google oauth scope:
- https://www.googleapis.com/auth/gmail.modify — read inbox messages to classify them, apply labels (approved / filtered / spammed), archive filtered messages, and create or remove gmail filters that act on future messages from the same senders.
we do not request or use any other google scopes. you can revoke this access at any time (see your rights below).
what we collect
the dtcmvp chrome extension collects the following data only when needed to provide its core functionality:
- account info: your name and email address, used to identify your account and personalize the experience.
- email metadata: for each incoming email we scan, we record the sender address and name, sender domain, subject line, and our classification result (relationship + action). this powers the queue and activity views in the extension.
- email body snippets: a truncated copy of the message body (up to 4,000 characters of plain text) is stored alongside the metadata so the extension can show you a preview without re-fetching from gmail. full message bodies, attachments, html structure, and email threads are never stored.
- filter preferences: your safe-sender / blocked-sender / spam lists, vendor preferences, and feedback link configuration.
- filter activity: a record of which emails were processed and how they were classified, so you can review and adjust the filter behavior.
how we use your data
data collected by the extension is used solely to provide the cold email filtering service. specifically:
- classifying incoming emails as cold outreach vs. legitimate correspondence
- applying gmail labels and filters that you have explicitly approved
- storing your filter preferences and rules so they apply to future emails
- showing you the queue and a history of recent filter activity
what we do not do with google user data
consistent with the google limited use requirements, we do not:
- transfer google user data to third parties except as necessary to provide or improve the user-facing features of the extension, comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to users
- use google user data to serve advertisements, including retargeting, personalized, or interest-based advertising
- use google user data to train or improve any generalized or non-personalized artificial intelligence or machine learning model. specifically, message content sent to anthropic's claude api for classification is processed transiently under no-retention enterprise terms — anthropic does not retain it or use it for training
- allow humans to read your google user data unless: (a) we have your affirmative consent for specific messages; (b) it is necessary for security purposes, such as investigating abuse; (c) it is necessary to comply with applicable law; or (d) the data has been aggregated and is used for internal operations in accordance with applicable privacy laws
- use google user data to determine creditworthiness or for lending purposes
- sell google user data
- store the full content of your emails, attachments, or thread history
- access emails from people you have an existing relationship with — those are skipped before classification
- use your data for any purpose unrelated to the extension's core functionality
data storage, retention, and security
data is stored on secure servers operated by dtcmvp and protected by industry-standard access controls, encrypted transport (tls), and at-rest encryption on disk volumes.
retention windows:
- account info and preferences: kept for the lifetime of your account; deleted within 30 days of account deletion
- email metadata + body snippets in the queue / activity view: kept while the row is useful to you (queue items remain until you action them; actioned items remain in activity history). you can clear any individual entry from the extension, or request bulk deletion via the contact email below
- oauth tokens (access + refresh): kept while your gmail connection is active. revoked + deleted within 24 hours when you disconnect
- full email bodies: never stored. only a transient, truncated snippet (≤4,000 chars) is persisted alongside the classification result
third-party services
email content sent for classification is processed by anthropic's claude api solely to determine if the message is unsolicited cold outreach. dtcmvp uses anthropic's enterprise / api offering, which does not retain submitted content or use it for training general-purpose models. see anthropic's privacy policy for more information.
we do not share google user data with any other third-party service.
your rights and how to revoke access
you can stop or remove dtcmvp's access to your gmail at any time:
- in the extension: open the side panel → gear icon (⚙) → gmail connection card → click disconnect. this revokes our oauth tokens and deletes them server-side.
- in your google account: visit myaccount.google.com/permissions, find dtcmvp, and click remove access.
- full account deletion: email peter@dtcmvp.com. all data associated with your account will be permanently deleted within 30 days of the request.
- uninstall: remove the extension from chrome at any time. this stops the extension from running locally; to also clear server-side data, follow the deletion instructions above.
changes to this policy
we may update this policy from time to time. material changes will be communicated to active users via email to the address on file. the "last updated" date at the top of this page reflects the most recent revision.
contact
questions about this policy or to exercise any of the rights described above, email peter@dtcmvp.com.