Attaché

Privacy Policy

Effective date: July 3, 2026

This Privacy Policy explains how Attaché Studios (“Attaché”, “we”, “us”) collects, uses, and protects your information when you use our application at attachestudios.com. Attaché helps content creators and talent managers organize brand-deal emails, extract deal details, and draft replies.

1. Information we collect

  • Account information — the email address and name you provide when you create an account.
  • Google account data (with your permission) — when you connect your Gmail account via Google OAuth, we access:
    • Gmail messages (read access) — to identify brand-deal threads and extract details such as brands, rates, and deliverables.
    • Sending email — to send reply messages that you review and approve.
  • Usage data — standard technical logs (e.g., IP address, browser type) generated when you use the app.

2. How we use your information

  • Identify and organize brand-deal emails into your inbox.
  • Extract structured deal details (brands, rates, deliverables, status).
  • Generate AI-assisted draft replies in your writing voice.
  • Send replies on your behalf only when you review and approve them.
  • Produce aggregated, anonymized rate benchmarks that contain no identifying content, to help creators and managers understand market rates.

3. How we share information

We do not sell your personal information. We share limited data with service providers (subprocessors) solely to operate Attaché:

  • Anthropic (Claude API) — email content is processed to extract deal details and generate draft replies. This data is not used to train Anthropic’s models.
  • Supabase — database and authentication storage.
  • Vercel — application hosting.
  • Google — the source of the email data you choose to connect.

We may also disclose information if required by law or to protect the rights, safety, and security of our users and service.

4. Google user data — Limited Use disclosure

Attaché’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We only use Google user data to provide and improve the user-facing features of Attaché.
  • We do not transfer or sell Google user data for advertising or other purposes.
  • We do not use Google user data to train generalized AI or ML models.
  • We do not allow humans to read your Google user data unless we have your consent for specific messages, it is necessary for security or to comply with applicable law, or the data has been aggregated and anonymized.

5. Data retention and deletion

We retain your data while your account is active. You may disconnect your Gmail account at any time (in the app or via your Google Account settings), and you may request deletion of your account and associated data by contacting us at the address below.

6. Data security

We use reasonable technical and organizational measures to protect your information. OAuth tokens and stored data are held securely, and access is limited to what is needed to operate the service. No method of transmission or storage is completely secure.

7. Your choices

  • Disconnect your Gmail account at any time, revoking our access.
  • Request access to, correction of, or deletion of your data.

8. Children

Attaché is not directed to, and not intended for use by, anyone under 18.

9. Changes to this policy

We may update this policy from time to time. Material changes will be reflected by updating the effective date above.

10. Contact

Questions about this policy or your data? Email us at contact@attachestudios.com.