Introduction

Welcome to Pectra AI — your intelligent, AI-powered email assistant built for productivity. We are fully committed to transparency about the data we collect, how we use it, and the control you have over it.

This Privacy Policy applies to all Pectra AI users and covers data collected through our web app, browser extension, and API integrations. By accessing or using Pectra AI, you agree to the terms described here. If you do not agree, please discontinue use of the service.

Information We Collect

We collect the following categories of information:

Account Information — Your name, email address, and credentials when you create an account or sign in via OAuth.

Email Content — With your explicit permission, Pectra AI accesses email subjects, body text, sender/recipient addresses, and metadata to deliver AI-powered assistance.

Usage & Behavioral Data — Interaction logs, feature usage, session duration, and in-app actions to understand how the product is used and improve it.

Device & Technical Data — IP address, browser type, operating system, and language preferences, collected automatically on access.

How We Use Your Information

Pectra AI uses collected data to:

• Deliver core AI features: smart replies, email summaries, composition suggestions, and scheduling
• Personalize the AI to match your unique communication style over time
• Improve overall model accuracy using anonymized, aggregated interaction patterns
• Detect spam, phishing attempts, and security threats on your behalf
• Send transactional notifications (login alerts, billing confirmations, security notices)
• Analyze platform-wide trends to guide product development
• Meet legal obligations and enforce our Terms of Service

Email Data & AI Processing

Your email data powers Pectra AI — and its protection is our top priority.

• All email content is encrypted in transit via TLS 1.3 and at rest via AES-256.
• Each user's data is processed in an isolated environment — never mixed across accounts.
• We do not use your personal email content to train shared AI models without your explicit opt-in consent.
• Email processing logs are automatically purged after 30 days.
• AI-generated drafts and summaries are stored only for your review and are never shared.
• You can revoke Pectra AI's email access at any time from Google, Microsoft, or your account settings page.

Data Sharing & Third Parties

We do not sell your personal data to anyone, ever. Sharing occurs only in limited, controlled circumstances:

Infrastructure Partners — Cloud hosting, error monitoring, and observability tools operate under binding data processing agreements (DPAs).

AI Processing Partners — Anonymized, context-limited queries may be processed by LLM providers under strict confidentiality agreements that prohibit training on your data.

Legal Requirements — We may disclose information in response to valid legal process, subpoenas, national security letters, or court orders.

Business Transfers — If Pectra AI is acquired or merges, your data may transfer to the successor entity under equivalent or stronger protections.

Data Security

We implement industry-leading security measures:

• TLS 1.3 for all data in transit

• AES-256 encryption for data at rest

• SOC 2 Type II certified infrastructure

• Quarterly third-party penetration testing

• Role-based access controls with the principle of least privilege

• Zero-trust internal network architecture

• 24/7 automated threat detection and incident response

While no system is completely immune to attack, we invest heavily in staying ahead of threats. We strongly recommend enabling two-factor authentication on your account for an added layer of protection.

Your Rights & Choices

Depending on your location, you may exercise the following rights:

Access — Request a full copy of the personal data we hold about you.
Correction — Ask us to correct inaccurate or incomplete data.
Deletion — Request deletion of your account and all associated data within 30 days.
Portability — Export your data in a structured, machine-readable format (JSON or CSV).
Opt-out — Withdraw consent for non-essential data processing at any time.
Restriction — Limit certain types of data processing under specific circumstances.

To exercise any right, email privacy@pectra.ai. We respond within 5 business days.

Cookies & Tracking

Pectra AI uses the following categories of cookies:

Essential Cookies — Required for login sessions, CSRF protection, and core functionality. These cannot be disabled without affecting service operation.

Analytics Cookies — Used to understand usage patterns, error rates, and feature adoption. You may opt out via our Privacy Center.

Preference Cookies — Store your UI settings, theme preferences, and notification configurations.

Manage your preferences at any time through your browser settings or the in-app Privacy Center. Disabling non-essential cookies will not affect core AI email functionality.

Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements.

When material changes occur:
• You will receive an email notice at least 14 days before changes take effect
• A prominent in-app banner will appear for 30 days following any update
• The "Last updated" date at the top of this page will be revised immediately

Your continued use of Pectra AI after the effective date of a revised policy constitutes your acceptance. If you disagree with changes, you may delete your account before they take effect.

Contact Us

Have questions, concerns, or want to exercise your data rights? Our Privacy Team is here to help.

Email: privacy@pectra.ai
Expected response time: Within 5 business days

For EU/EEA residents:
Data Protection Officer: dpo@pectra.ai

Mailing Address:
Pectra AI, Inc.
1 Market Street, Suite 500
San Francisco, CA 94105
United States

We take every privacy inquiry seriously and are committed to resolving your concerns promptly.