Privacy Policy

From customers:

• Account and billing information: your name, work email, company and payment details. Payments are processed by Stripe; we don't store full card numbers.
• Mailbox connections: what's needed to send and receive mail for a connected mailbox, such as the address, server settings and an access credential (an app password, or a Google sign-in authorization).
• Campaign data: the contact lists you give us or ask us to build, your email copy, and the messages sent and received through your connected mailboxes.

About the people our customers contact: business contact details (such as name, work email, title and company) that customers upload, or that we gather from data providers and public sources when we build lists. We also record what happens when we email someone: deliveries, bounces, replies and opt-outs.

From website visitors: details you give us when you book a call or register for a webinar, and usage data collected with cookies and similar tools (see "Cookies and analytics").

• To run campaigns: send email, warm up mailboxes, and detect and sort replies and bounces.
• To build lead lists for customers who ask us to.
• To improve Furnace, including training AI and machine-learning models on de-identified or aggregated data. Google user data is never used for this.
• To keep contact data accurate across Furnace. When we learn that an address is invalid or bounces, or that a person has left a company, we may flag that contact for any customer who uploads it. A flag never reveals which customer it came from or what was said.
• To publish aggregate statistics, such as average reply rates by industry, that identify no one.
• To provide support, keep the service secure, and prevent abuse.
• To bill customers, communicate with them, and market Furnace to businesses.

Furnace lets you connect Google Workspace or Gmail mailboxes with Google sign-in. When you do, we request access to Gmail (the https://mail.google.com/ scope) for that mailbox, so that Furnace and its warm-up provider can send email from it, read incoming messages to detect replies and bounces, and manage warm-up messages (for example, moving them out of spam and archiving them).

We use Google user data only to provide and improve these user-facing features. Specifically:

• We don't sell Google user data, and we don't use it for advertising.
• We don't use Google user data to develop, improve or train generalized AI or machine-learning models, and we don't use it for the contact flags or statistics described above.
• We share Google user data only with service providers that help us deliver these features (see "Who we share information with"), when you ask us to, for security reasons, or when the law requires it.
• People at Furnace read message content only with your permission, for security purposes, to comply with the law, or when the data has been aggregated and anonymized for internal operations. If you use our reply handling, you give us that permission for the replies to your campaigns, which our team reads and answers on your behalf.

Furnace's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

To disconnect a mailbox, email sales@getfurnace.io. We'll remove it from Furnace and from our warm-up provider. You can also remove Furnace's access yourself at any time at myaccount.google.com/permissions.

We share information with:

• Service providers that process it for us: hosting and infrastructure (Amazon Web Services, Supabase), mailbox and domain providers, our mailbox warm-up provider (Mailivery), payments (Stripe), our own email, calendar and files (Google Workspace), email delivery for our own messages (Resend), and AI providers that sort replies (through OpenRouter).
• The customer a list is built for. When a customer asks us to build a list, we give them the business contact details of the people on it.
• Other customers, only as contact flags that say a contact is invalid or has moved on, never where the flag came from.
• Analytics and advertising partners for our own website (see "Cookies and analytics").

We don't share one customer's campaigns, copy, results or strategies with another. We may also disclose information if the law requires it, to protect our rights or users, or as part of a merger or acquisition (in which case this policy continues to apply).

Our website uses Google Analytics to understand how it's used, and Apollo's website tracker to identify the companies that visit, so our sales team can follow up. When you register for a webinar, we send LinkedIn a hashed copy of your email address and your name so we can measure our LinkedIn ads. You can block cookies in your browser settings, and you can opt out of Google Analytics with Google's opt-out add-on.

We keep customer information while the account is active and as needed to provide the service. When a customer closes their account or asks us to, we delete their data, including mailbox credentials and Google user data, within 30 days. We keep records the law or billing requires, and de-identified or aggregated data and contact flags, which don't identify the customer. To request deletion, email sales@getfurnace.io.

We protect information with encryption in transit and at rest, and with access controls. No system is perfectly secure, but we work to protect your data and will notify you of a breach as the law requires.

Customers can access, correct, export or delete their information by emailing sales@getfurnace.io.

If you received an email sent through Furnace and don't want more from that sender, reply to say so, and that sender stops emailing you. Each customer keeps its own opt-out list. You can also ask us to delete the contact details we hold for list building and to leave you out of the lists we build. Customers who got your details elsewhere control their own lists.

Depending on where you live, you may have other rights over your information. Email us to use them.

Furnace is a business service and isn't directed to anyone under 16.

We'll post any changes on this page and update the date above. Questions? Email sales@getfurnace.io.