Ocuro Privacy Policy

Effective date: July 11, 2026

Ocuro ("we", "us") is an email outreach assistant offered as a Chrome extension with a managed backend service. This policy explains what information Ocuro handles when you use it, and how.

What Ocuro accesses, and why

When you sign in with Google and connect a spreadsheet, you authorize Ocuro to:

• Read your basic Google profile (name, email address) — to identify your account inside Ocuro.
• Read and update the lead spreadsheet you connect — your spreadsheet is the source of truth for your leads; Ocuro reads lead details from it and writes outreach status and sent-email records back to it. Ocuro only touches the spreadsheet you explicitly connect.
• Create drafts in your Gmail and read your outreach threads — Ocuro writes personalized email drafts into your Gmail Drafts folder and checks the conversations it created to detect when you sent an email, when a prospect replied, or when a message bounced. Ocuro never sends email on your behalf — you review and send every message yourself from Gmail.

What we store

• Your account identifiers (name, email) and Google OAuth tokens (never your password — Google issues scoped tokens that you can revoke at any time at myaccount.google.com/permissions).
• Lead information from your connected spreadsheet and the outreach emails generated for those leads, so sequences and follow-ups work.
• Operational records (campaign settings, send/reply status, service logs). Internal event logs are automatically deleted after 90 days.

How your information is used

Solely to operate Ocuro for you: generating personalized outreach emails, placing drafts in your Gmail, tracking your campaigns, and showing your dashboard. Lead details are shared with our AI provider (Anthropic) only as needed to write each email, under contractual terms that prohibit training on or retaining your data beyond service delivery.

We do not sell your data. We do not use it for advertising. We do not transfer it to third parties except the service providers that run Ocuro (Google APIs, Anthropic for text generation, Supabase for secure hosting, Resend for service alert emails), each processing it only on our instructions.

Google API Services — Limited Use disclosure

Ocuro's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide the user-facing features described above, is never sold, is never used for advertising, and is never read by humans except with your explicit consent, for security purposes, or as required by law.

Security

Data is encrypted in transit (TLS) and at rest. Access to production systems is restricted to the operator. Backend secrets are stored in managed vaults, never in the extension you install.

Retention and deletion

Your data is retained while your account is active. Disconnecting a campaign stops all processing for it. To delete your account data entirely, email us and we will remove your stored leads, generated emails, and tokens. Leads removed from your spreadsheet are automatically purged from our systems after 30 days.

Contact

We may update this policy as Ocuro evolves; material changes will be reflected on this page with a new effective date.