PRIVACY POLICY

I Think Not, Inc. ("Envoy")

Effective Date: April 9, 2026

1. Introduction

I Think Not, Inc. ("Company," "we," "us," or "our") operates the Envoy platform ("Service"), an AI-powered customer support email platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our hosted Service at byenvoy.com or any related websites, APIs, and applications. If you self-host the open-source version of Envoy, this Privacy Policy applies only to the extent you interact with our hosted infrastructure (for example, authentication services or telemetry, if enabled).

By accessing or using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Account Information

When you register for the Service, we collect your name, email address, company name, and billing information (processed by our third-party payment provider).

2.2 Customer Support Data

The Service processes email content and customer support communications that you or your end customers transmit through the platform. This data is used to generate AI-powered responses and improve the accuracy of the Service for your account.

2.3 OAuth and Third-Party Integrations

Envoy connects to third-party services via OAuth, including Gmail (Google), Microsoft (Outlook/Exchange), and Shopify. When you authorize these integrations, we receive access tokens and the data necessary to read, send, and manage emails or retrieve product and order data on your behalf. We do not store your passwords for these services.

2.4 Usage and Analytics Data

We automatically collect log data, IP addresses, browser type, device identifiers, pages visited, feature usage, and performance metrics to improve the Service and diagnose issues.

2.5 Cookies and Tracking Technologies

We use cookies, local storage, and similar technologies to maintain sessions, remember preferences, and analyze usage. You can control cookie settings through your browser, but disabling cookies may affect Service functionality.

3. How We Use Your Information

We use the information we collect to:

  • Provide, operate, and maintain the Service, including generating AI-powered email responses.

  • Process transactions and manage your subscription.

  • Connect to and synchronize data with third-party services you authorize (Gmail, Microsoft, Shopify).

  • Improve, personalize, and expand the Service.

  • Communicate with you about updates, security alerts, and support.

  • Detect, prevent, and address fraud, abuse, and technical issues.

  • Comply with legal obligations.

4. Data Retention

We retain your account information for as long as your account is active or as needed to provide the Service. Customer support data processed through the Service is retained for the duration of your subscription unless you request earlier deletion. Upon termination of your account, we will delete or anonymize your data within 90 days, except where retention is required by law.

5. Data Sharing and Disclosure

We do not sell your personal information. We may share data with:

  • Service providers and subprocessors who assist in operating the Service (hosting, payment processing, analytics), subject to contractual data protection obligations.

  • Third-party integrations you authorize (Gmail, Microsoft, Shopify) to the extent necessary for functionality.

  • Law enforcement or government authorities when required by law, subpoena, or court order.

  • In connection with a merger, acquisition, or asset sale, in which case your data may be transferred to the successor entity.

6. Data Security

We implement industry-standard technical and organizational measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. International Data Transfers

If you are located outside the United States, your information may be transferred to and processed in the United States. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy and applicable data protection laws, including Standard Contractual Clauses where required.

8. Your Rights

8.1 General Rights

Depending on your jurisdiction, you may have the right to access, correct, delete, or port your personal data, as well as the right to restrict or object to certain processing. To exercise these rights, contact us at privacy@byenvoy.com.

8.2 GDPR (European Economic Area, UK, and Switzerland)

If you are in the EEA, UK, or Switzerland, our legal bases for processing include: performance of a contract, legitimate interests, consent, and legal obligation. You have the right to lodge a complaint with your local data protection authority.

8.3 CCPA (California)

California residents have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell personal information. To make a request, contact privacy@byenvoy.com.

9. Children's Privacy

The Service is not directed to individuals under 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.

10. Open-Source Self-Hosted Instances

If you self-host Envoy using the open-source codebase, you are the data controller for all data processed by your instance. This Privacy Policy does not govern data processed solely on your infrastructure. However, if your self-hosted instance communicates with our servers (for example, for license verification or optional telemetry), this policy applies to that data.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website and updating the effective date. Your continued use of the Service after changes constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at:

I Think Not, Inc.

Email: privacy@byenvoy.com

533 E Girard Ave STE 27063, Philadelphia, PA 19125