Startwave Technology Inc.
Privacy Policy
On this page
Effective September 18, 2026
Who operates Startwave
Startwave Technology Inc. operates Startwave. This policy explains how we handle information when you visit the service, use a workspace, or communicate with support. Contact joe@startwave.io with privacy questions or requests.
Information we process
We process account and workspace identifiers, login information, campaign settings and copy, contacts and contact attributes supplied to a workspace, suppression records, sender details, billing and usage records, conversations, delivery metadata, and technical records needed to operate and protect the service.
Connected accounts and mailboxes
Google sign-in and mailbox authorization are separate connections. An authorized mailbox connection permits only the actions shown at connection time, such as sending messages or retrieving replies. We retain the credentials, content, and metadata needed to maintain an enabled connection and display its recorded work. Revoking a connection does not reverse completed activity or automatically erase historical records already stored by Startwave.
How we use information
We use information to authenticate users, perform authorized workspace actions, organize replies, enforce suppression, account for usage, recover uncertain operations, provide support, and prevent abuse. We do not use email tracking pixels to measure opens. The selected public and consumer artifacts contain no marketing analytics or tracking pixels. We do not sell Google user data or use it for advertising targeting. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Optional reply assistance
When an authorized user requests reply assistance, relevant conversation text and supplied campaign context may be sent to the configured assistance provider to create a proposal for human review. The feature does not send a reply by itself. We do not use Google user data to train general-purpose AI models.
Service providers and disclosures
We share only the information needed to deliver requested features with hosting and security services, mailbox and email providers, recipient-verification providers, payment processors, and requested assistance providers. Those providers do not all receive the same information. We may also disclose information when required by law or to protect rights and security.
Storage, retention, and security
The current service runs on owner-operated single-host infrastructure with local backups. Access controls, encrypted stored authorization grants, and protected credential files help protect information, but no system guarantees complete security or availability. We retain records while needed to operate the service, prevent unwanted contact, resolve disputes, and meet applicable obligations. Archiving a campaign is not deletion, and backup copies may persist until replaced.
Your choices and requests
You can manage workspace settings and exclusions, revoke connected access with the relevant provider, and contact us to request access, correction, or deletion. We may verify your authority before acting. A workspace owner controls information processed for that workspace, so a request about a workspace’s campaign may need to be directed to that workspace owner.
Cookies, transfers, and updates
We use session cookies and browser storage needed for authentication, preferences, and requested operation recovery. We do not promise that processing remains in a particular country; service providers may process information internationally. We will publish an updated policy when our practices materially change and provide additional notice where required.