Privacy Policy

Last updated: June 7, 2026

1. What We Collect

Account: your name and email, from sign-up or Google OAuth.
OAuth tokens: Google access and refresh tokens when you connect Google or Gmail. Stored encrypted, used only to run the service for you.
Usage: how you use the platform, including searches, chat history, and monitored topics.
Content: articles, documents, and material you add for monitoring and analysis.
Media contacts: names, work emails, outlet, beat, and links to public work for journalists you target. Gathered from public news and profiles, and verified through an email-discovery provider.

We use your data to:

Sign you in and keep your session.
Run news monitoring, topic modeling, and content analysis.
Search news and the web, crawl articles, and track global news events relevant to your clients.
Build media lists and verify journalist contacts.
Draft and send pitches through your Gmail, only when you authorize it.
Keep the platform reliable and answer support requests.

We do not sell your data or use it for advertising.

To build media lists, we process professional data about people who are not users of the Service:

We identify journalists and authors from public news coverage and professional profiles.
We verify their work email addresses through a discovery provider (Hunter).
We store the recipients, subject, and content of pitches you send.

We keep professional contact details only. Journalists who want their information removed can email contact@ethanyoung.dev.

Google: sign-in, Gmail sending, and optional Drive storage. See Google's Privacy Policy.
AI models: Anthropic, OpenAI, Voyage AI, and Inception Labs power chat, drafting, analysis, and search embeddings. Content and article text you process may be sent for inference. See OpenAI's and Anthropic's policies.
Pinecone: stores content embeddings for search.
Hunter: finds and verifies journalist emails.
Brave: web and news search.
Firecrawl: renders and extracts web pages.
GDELT: public global news data we query.
Public web and X (Twitter): we crawl public news and posts for analysis.

Encryption: TLS in transit; tokens, credentials, and API keys encrypted at rest.
Access controls: production access is least-privilege, authorized personnel only.
Minimization: we keep only what the service needs.
Retention: deleting your account removes your data immediately. Usage and cost logs are retained up to 24 months, then purged automatically, unless law requires otherwise.
Breach notice: we notify affected users within 72 hours of discovery, where law requires.

Disconnect integrations anytime in Settings, which revokes our Google access.
Export a copy of your data anytime in Settings.
Delete your account and data anytime in Settings. Deletion is immediate and irreversible.
Revoke Google access anytime via Google Account Permissions.

Questions or data requests: contact@ethanyoung.dev. We reply within 5 business days. If you think your account was compromised, email us immediately.