Privacy policy.

Who we are

Oakwright builds sales and operations software, including a hosted workspace that helps businesses run outreach, research, and back office work. This policy covers this website and that software. Questions go to [email protected].

This website

oakwright.co uses first party analytics only: a visitor identifier, the pages you view, and coarse location derived from your IP address. There are no third party advertising trackers. If you submit a form, we keep what you typed so we can reply.

The software, in one paragraph

Each customer's workspace runs on its own isolated instance with its own database. Business data you put into your workspace stays on your instance. Oakwright's central systems receive operational metrics from your instance, such as usage and cost totals for billing, and never the contents of your emails, documents, or contacts.

Google user data

You can connect a Google account to your workspace so it can send email on your behalf. Here is exactly what that means:

• Scope. The connection requests a single permission: gmail.send. It allows your workspace to send email from your address. It does not allow reading your mailbox.
• What it is used for. Sending email messages that were composed in your workspace and that you explicitly approved before sending. Every outbound email is held for your review and released only by your decision. Nothing sends itself.
• What we never do. We do not read, store, or process the contents of your mailbox. We do not access your contacts, calendar, or files through this connection. We do not use Google user data for advertising, model training, or any purpose other than sending the email you approved.
• What is retained. The OAuth tokens for the connection are stored encrypted at rest on your own instance. A record of each sent message, meaning the recipient, subject, body, and timestamps, is kept in your instance's database as your sending history. Oakwright's central systems do not receive copies.
• Revoking access. You can remove the connection at any time from your workspace's Secrets panel, or revoke it from your Google account's security settings. Revocation stops all sending immediately.

Oakwright's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Retention and deletion

Data in your workspace persists for as long as your instance exists. When an instance is deprovisioned, its database and stored credentials are destroyed with it. You can ask us to delete anything we hold about you at [email protected] and we will.

Changes

If this policy changes, the date at the top changes with it. Material changes to how Google user data is handled will be communicated to affected customers before they take effect.