Privacy Policy

Last updated: 8/31/2026

1. Introduction

Xyntra AI ("we," "us," "our," or "Company") operates www.xyntra-ai.com (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service, particularly in relation to Google and Microsoft OAuth integrations.

2. Google OAuth Integration

Data Collected

When you connect your Gmail account via Google OAuth, we request access to:

Your email address and account profile information
Email metadata (sender, recipient, subject, timestamps)
Email content to track opens, clicks, and replies
Gmail watch notifications for real-time inbound message tracking

How We Use This Data

Send outbound emails on your behalf from connected accounts
Track email engagement (opens, link clicks, brochure downloads)
Monitor inbound replies and flag hot prospects
Log email activity in the Prospect Activity entity
Generate email performance reports and analytics

Data Storage & Security

Email metadata and activity logs are stored in Base44's secure database. OAuth tokens are encrypted and refreshed as needed. Email content is not permanently stored; we only process it for engagement tracking and reply detection.

Your Rights

You can disconnect your Gmail account at any time via the "Linked Email Accounts" settings page. Disconnecting revokes our access to your Gmail account immediately. For more information, see Google's Privacy Policy.

3. Microsoft OAuth Integration

Data Collected

When you connect your Outlook account via Microsoft OAuth, we request access to:

Your email address and account profile information
Email metadata (sender, recipient, subject, timestamps)
Email content for engagement tracking and reply monitoring
Calendar access for meeting scheduling (optional)

How We Use This Data

Send outbound emails on your behalf from connected Outlook accounts
Track email engagement metrics
Monitor and log inbound replies
Track calendar availability for meeting scheduling (if enabled)
Generate analytics and performance reports

Data Storage & Security

All data from Outlook integration is encrypted and stored securely in Base44's database. OAuth tokens are refreshed regularly. Email content is processed for engagement tracking but not permanently archived.

Your Rights

You can disconnect your Outlook account anytime via settings. Disconnecting immediately revokes our access. For more information, see Microsoft's Privacy Statement.

4. Data Retention

Email metadata and activity logs are retained for the duration of your account. You may request deletion of specific email records. Upon account deletion, all associated email data and activity logs are permanently removed from our systems within 30 days.

5. Security Measures

OAuth tokens are encrypted and never logged in plain text
All data is transmitted over HTTPS
Database access is restricted and audited
We comply with industry-standard security practices
Regular security assessments and updates

6. Third-Party Services

We use Base44 as our backend infrastructure provider. Your data is hosted on Base44's servers. Base44 maintains its own privacy and security standards. We do not share your email data with third parties except as required by law or with your explicit consent.

7. Your Privacy Controls

Pause/Unpause Emails: Toggle email accounts on/off in Linked Email Accounts without full disconnection
Delete Account Data: Request full data deletion (except legal holds)
Export Data: Export your prospect records and email activity (where supported)
Disconnect Integration: Revoke access to Gmail or Outlook anytime

8. Contact Us

If you have privacy concerns or questions about this policy, please contact us at:

Xyntra AI

Website: www.xyntra-ai.com

For support, visit the app's help center or contact your account administrator

9. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of significant changes by updating the "Last Updated" date. Your continued use of the Service constitutes acceptance of the updated policy.

10. Compliance

This Service complies with applicable privacy laws including GDPR (EU), CCPA (California), and other data protection regulations. Residents of these regions have additional rights regarding their data, which are outlined in applicable law.