Privacy Policy

Salvo AI (“Salvo”, “we”, “us”) provides a platform that helps direct-to-consumer brands run market research, build storefronts, generate advertising creative, and — where enabled — triage and reply to customer support email. This policy explains what we do with information that passes through that platform.

It applies to salvoapp.io and the Salvo application. Questions go to privacy@salvoapp.io.

Account information. Your name, email address and authentication details, handled on our behalf by our identity provider. We never see or store your password.

Content you create. Brands, products, research notes, generated copy and images, campaign configuration, and anything else you enter or upload.

Connected accounts. When you connect a third-party account — Google, Meta, or Shopify — we store the access credentials needed to act on your behalf, encrypted at rest, plus the data described below.

Technical data. Standard server and security logs: IP address, browser type, timestamps, and error diagnostics.

We do not buy personal data from third parties, and we do not operate advertising trackers.

This section governs everything we access through Google APIs and takes precedence over the rest of this policy where they differ. Connecting a Gmail mailbox is entirely optional; the rest of Salvo works without it.

What we request, and why. When you connect a mailbox we ask for the narrowest set of scopes that lets the feature function:

• openid and userinfo.email — to identify which mailbox you connected and to detect if you later re-authorise a different account.
• gmail.modify — to read incoming support messages and to apply, remove and manage labels on the threads Salvo handles. We do not permanently delete your mail.
• gmail.send — to send replies that you have approved, or that you have explicitly configured to send automatically.

How we use it. Message content is used solely to operate the support feature for you: classifying what a customer is asking about, matching it to one of your reply templates, filling that template with the relevant facts, and sending the reply once it is approved. New mailboxes start paused, with every intent set to draft, so nothing is sent until you decide otherwise.

What we store. For threads Salvo processes, we retain the sender and recipient addresses, subject, message body, attachment filenames and sizes (not attachment contents), the message identifiers needed to thread a reply correctly, and the classification and drafts we produced. OAuth refresh and access tokens are encrypted before being written to our database.

Automated processing. To classify a message and draft a reply, the subject, message body and recent thread history are sent to our AI provider, Anthropic, via its commercial API. Anthropic does not use data submitted through that API to train its models. No human at Salvo reads your mail except where you ask us to investigate a specific problem, or where we are legally required to.

Revoking access. Disconnect the mailbox from Salvo’s support settings at any time. Doing so deletes the stored credentials along with the threads, messages and drafts associated with that mailbox. You can also revoke Salvo independently from your Google account permissions. Your Gmail mailbox itself is never deleted or altered beyond the labelling described above.

If you connect a Shopify store, we read order data in order to answer order-status questions and, where you have enabled it, to cancel an order a customer asks to cancel. Identity is always matched on the customer’s email address rather than an order number alone, so an order is only ever discussed with the address that placed it.

If you connect Meta, we read campaign and performance data for the ad accounts you select, and publish creative you have approved. We do not access your personal Facebook or Instagram profile content.

We do not sell personal information. We share it only with service providers who process it on our behalf, under contract, for the purposes described here:

• Vercel — application hosting and delivery
• Neon — managed PostgreSQL database hosting
• Clerk — user authentication and account management
• Anthropic — AI classification and drafting
• Google — Gmail access, where you have connected a mailbox
• Shopify and Meta — where you have connected those accounts
• Object storage providers — for images and generated assets

We may also disclose information where required by law, to enforce our terms, or to protect the rights and safety of our users. If Salvo is involved in a merger or acquisition, we will give notice before your information becomes subject to a different privacy policy.

Data is transmitted over TLS and stored on managed infrastructure in the United States. Third-party credentials — including Google refresh tokens — are encrypted with AES-256-GCM before being written to the database, so a database copy alone does not yield usable credentials. Access to production systems is limited to personnel who need it.

No system is perfectly secure. If we become aware of a breach affecting your information, we will notify you promptly and as required by applicable law.

We keep information for as long as your account is active. Disconnecting a connected account deletes the data tied to it. Deleting your account removes your content and connected-account data from our production systems; routine encrypted backups age out on their own cycle, typically within 30 days.

To request deletion, use the in-app controls or email privacy@salvoapp.io.

Depending on where you live, you may have the right to access, correct, export or delete your personal information, to object to or restrict certain processing, and to withdraw consent. Contact us at the address above and we will respond within the period required by applicable law. You also have the right to complain to your local data protection authority.

Salvo operates from the United States, and information you provide is processed there. If you access the service from elsewhere, you understand that your information will be transferred to and processed in the United States, where data protection law may differ from your own.

Salvo is a business tool and is not directed at anyone under 18. We do not knowingly collect personal information from children. If you believe a child has provided us information, contact us and we will delete it.

We may update this policy as the product changes. Material changes will be announced in the application or by email before they take effect, and the “last updated” date above will change. Continuing to use Salvo after an update means you accept the revised policy.

Salvo AI — privacy@salvoapp.io. See also our Terms of Service.