Privacy Policy
Last updated: March 27, 2026
1. Who we are
scrapensend is operated by Codaro Automation(“we”, “us”, “our”). We provide an AI-powered cold email outreach automation tool available at scrapensend.com.
Contact: dominik.dyga@codaro.dev
2. Data we collect
We collect and process the following data:
- Account data: your name, email address, and profile picture provided via Google Sign-In.
- Gmail OAuth tokens: encrypted refresh tokens that allow us to send emails on your behalf. We never store your Google password.
- Campaign data: prompts you submit, scraped lead data, generated email content, and sending logs.
- Payment data: processed by Stripe. We do not store credit card numbers — Stripe handles all payment information.
- Usage data: pages visited, features used, and error logs for improving the service.
3. How we use Gmail data
scrapensend requests access to your Gmail account via Google OAuth2 with the scope https://mail.google.com/.
We use this access exclusively to:
- Send cold outreach emails that you explicitly create and approve through campaigns.
We never:
- Read your existing emails or inbox.
- Access your contacts, calendar, or any other Google services.
- Share your Gmail tokens or email content with third parties.
- Use your Gmail data for advertising or profiling.
- Store your emails after they are sent — only metadata (recipient, subject, timestamp) is logged for your campaign dashboard.
Your Gmail refresh token is encrypted with AES-256 before being stored in our database. You can revoke access at any time from your Google Account permissions.
4. Data storage and security
- All data is stored in Google Cloud / Firebase infrastructure (EU/US regions).
- OAuth tokens and SMTP credentials are encrypted at rest using AES-256.
- All connections use HTTPS/TLS encryption in transit.
- We implement Firebase Security Rules to ensure users can only access their own data.
5. Third-party services
We use the following third-party services:
- Google Cloud / Firebase — authentication, database, hosting.
- Google Gemini AI — email content generation. Your prompts are sent to Google's AI API to generate personalized emails.
- Stripe — payment processing. See Stripe's privacy policy.
6. Data collected about email recipients
When our users run outreach campaigns, scrapensend collects publicly available business contact information from company websites. This includes:
- Company name and website URL — sourced from public web search results.
- Business email addresses — scraped from publicly accessible pages (contact pages, footers, about pages). Only general business addresses (e.g. info@, contact@, hello@) are collected. Personal email addresses (gmail.com, yahoo.com, etc.) are automatically filtered out.
- Website content summary — used temporarily by our AI to personalize email content. Not stored permanently.
This data is processed under the legal basis of legitimate interest (GDPR Article 6(1)(f)) for the purpose of B2B business communication. Every email sent through scrapensend includes an unsubscribe link. Recipients who unsubscribe are added to a permanent exclusion list and will not receive further emails through our platform.
Recipient rights: If you have received an email sent through scrapensend and wish to have your data removed from our systems, please contact us at dominik.dyga@codaro.dev. We will process deletion requests within 30 days.
7. Data retention
- Account data is retained while your account is active.
- Campaign data (logs, leads, generated emails) is retained for 90 days after campaign completion, then automatically deleted.
- Upon account deletion, all your data — including OAuth tokens, campaign data, and settings — is permanently removed within 30 days.
8. Your rights
You have the right to:
- Access your data — view all data we hold about you.
- Delete your data — request complete account and data deletion.
- Export your data — download your campaign data in a standard format.
- Revoke Gmail access — at any time via Google Account settings.
- Withdraw consent — stop using the service and delete your account.
To exercise any of these rights, contact us at dominik.dyga@codaro.dev.
9. Cookies
We use essential cookies only — for authentication sessions and security tokens. We do not use tracking cookies, advertising cookies, or analytics cookies.
10. Children
scrapensend is not intended for use by individuals under the age of 18. We do not knowingly collect data from minors.
11. Changes to this policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated “Last updated” date. Continued use of scrapensend after changes constitutes acceptance of the updated policy.