Privacy — Fondline

Fondline sends email sequences from your own Gmail account and stops them when somebody replies. This page describes what it reads, what it keeps, and what it never touches.

Fondline is operated by Fondline LLC, which is the controller of the data described here. Questions about any of it go to privacy@fondline.com

What Fondline reads from your Gmail

Message headers only — never the contents of your mail. Fondline requests Gmail’s gmail.metadata scope, which returns senders, recipients, subjects, dates and threading identifiers, and which cannot return a message body even if the code asked for one. It also requests gmail.send to send the messages you compose in Fondline, and your email address to know which account was connected.

Headers are read for one purpose: to notice a reply, a bounce or an out-of-office so a sequence stops or waits. Fondline does not read, store or transmit the body of any message in your mailbox.

What Fondline stores

The contacts you import, and any columns you include with them.
The campaigns and message text you write.
A record of each message sent — recipient, step, and time.
Your Gmail authorization, encrypted with Google Cloud KMS. The web application holds only the public half of that key and cannot decrypt it; only the sending worker can.

What Fondline does not do

No tracking pixels, and no rewriting of your links.
No selling or sharing of your data, and no advertising.
No use of your data to train machine learning models.
No access to your mail by staff, except where you ask for support in writing.

Google user data

Fondline’s use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can revoke Fondline’s access at any time at your Google account permissions.

Deleting your data

Settings → Account deletes your account, the workspaces only you belong to, their campaigns and contacts, the record of what was sent, and the stored Gmail credential. It happens immediately and cannot be undone. Revoking access in your Google account is a separate step, linked above.

Who else handles it

Data is stored in the United States, on Supabase (Postgres), Vercel and Google Cloud. Sub-processors are limited to those, plus Resend for the transactional email Fondline itself sends, such as an invitation.