Last updated: July 31, 2026
This Privacy Policy describes how VCShare ("Company," "we," "us," or "our") collects, uses, stores, and shares information about you when you access or use our platform, website, and related services (collectively, the "Service"). By using the Service, you agree to this Privacy Policy. If you do not agree, please discontinue use of the Service.
Summary of how we handle Google user data
Data obtained through Google APIs is used for one purpose only: to provide the user-facing features you turn on, described in Section 4. It is never used to train or improve any AI or machine learning model, never sold, never used for advertising, never included in analytics or de-identified datasets, and never read by a human except with your consent, to investigate a specific security incident, or where the law requires it. The general purposes described in Section 3 apply to information you give VCShare directly, not to data obtained through Google APIs. Our use of Google user data complies with the Google API Services User Data Policy, including its Limited Use requirements.
We collect the following categories of information:
We collect information:
This section does not apply to data obtained through Google APIs. That data is used only to provide the features described in Section 4: reading the documents in the folder you shared to create company records, and creating email drafts in your Gmail Drafts folder. None of the other purposes below apply to it.
We use information you provide to VCShare directly to:
In accordance with the Google API Services User Data Policy Limited Use requirements, Google user data is never: used to train or improve any artificial intelligence or machine learning model; sold or transferred for advertising, marketing, credit assessment, or any similar purpose; included in aggregated or de-identified datasets used for product analytics or improvement; used for personalized advertising; or read by a human, except with your explicit consent, to investigate a specific security incident, or where required by law. Google user data is also excluded from any transfer of business assets described in Section 5 unless we obtain your explicit consent.
VCShare's use of data obtained through Google APIs is subject to the Google API Services User Data Policy, including the Limited Use requirements. We request only the following OAuth scopes, and each is used solely as described:
Google Drive access does not use an OAuth scope. VCShare requests no Drive permission when you sign in with Google. Drive files are read by a dedicated service account that can see only the specific folder you choose to share with it, read-only. We cannot access your other folders, any file outside the shared folder, or your Drive as a whole, and we never modify or delete anything. You revoke this access by unsharing the folder, independently of your Google sign-in.
Inbound email forwarding (optional): VCShare offers two optional email-forwarding features that do not require any additional Google permissions:
You may revoke our access to your Google account at any time through your Google Account permissions page or through the Service's disconnect feature.
We may share your information in the following circumstances:
We set one essential cookie to keep you signed in. It is HttpOnly, meaning it cannot be read by JavaScript, and it is transmitted only over HTTPS. We also use browser local storage for display preferences such as dark mode. We use third-party analytics to measure site usage, such as pages visited and features used. Data obtained through Google APIs is never sent to analytics providers. You may disable cookies in your browser settings, but doing so will prevent you from signing in.
We retain your information for as long as your account is active and for such additional period as reasonably necessary to fulfill the purposes described in this Policy, comply with legal obligations, resolve disputes, and enforce agreements. Upon account deletion, we will delete or anonymize your personal data within a commercially reasonable time, subject to legal retention requirements.
We do not store copies of the files in your shared Drive folder. File contents are read in memory to extract company details and are then discarded. What we retain is the file's name and identifier, the company details extracted from it, and any drafts you generate. Your Google OAuth tokens are deleted when you disconnect your Google account in Settings, and Drive access ends the moment you unshare the folder.
Documents you upload directly are not stored either. An uploaded file is held in memory only for as long as it takes to read its text, and is then discarded. Unlike a Drive file, no database record of the upload is created at all: what remains is the company details extracted from it and the name given to that company.
We implement technical and organizational measures appropriate to the sensitivity of the data:
No security measure is perfect, and we cannot guarantee absolute security.
In the event of a security breach involving your personal data, we will notify you as required by applicable law.
Depending on your jurisdiction, you may have certain rights with respect to your personal data, including the right to access, correct, delete, or receive a portable copy of your data. In the app you can delete individual contacts on the Contacts page, delete individual drafts on the Drafts page, and remove your stored AI keys or disconnect your Google account in Settings. To delete company records, file records, or your account in full, email us at robbinaglie@gmail.com and we will action the request within 30 days. Users in the EEA, UK, or California may have additional rights under GDPR, UK GDPR, or the CCPA/CPRA.
You may opt out of marketing emails by using the unsubscribe link in any marketing email.
VCShare uses third-party AI APIs to read the documents in your shared folder and to generate email drafts. You supply your own API key for the provider you choose, and each request is made to that provider under your own account.
Google user data - including raw, aggregated, anonymized, or derived data - is never used to create, train, or improve any foundational or general-purpose artificial intelligence or machine learning model, whether operated by VCShare or by a third party. We use only providers whose API terms prohibit training on submitted data:
Because you supply the key, your own provider account governs. VCShare has no AI account of its own and never sends your documents to a provider under our credentials. Every request is made with the API key you entered, against your own account with that provider, so your agreement with them applies alongside this policy. You choose which provider is used, and you can change or remove your keys in Settings at any time.
The terms described above are each provider's standard API terms as of July 2026, and they are what make VCShare's use of them compatible with the Limited Use requirements. Your provider account must remain configured to those terms while your key is connected to VCShare. Accordingly, as a condition of using the Service, you must not enable any data-sharing or model-improvement option offered by your AI provider, and you must not use a free-tier Gemini key. If you cannot meet this condition for a given provider, remove that key in Settings and use a different provider.
We do not operate self-hosted or offline AI models. We do not sell Google user data, do not transfer it to third parties except the AI provider you select and the infrastructure vendors necessary to run the Service, and do not use it for advertising.
Non-Google data you provide (such as contact lists and company notes you enter directly) may be used in aggregated, de-identified form to improve the Service, subject to applicable law. Data obtained through Google APIs is excluded from this entirely.
We may monitor and log activity on the Service for purposes of security, fraud prevention, and compliance with legal obligations. Any human review of data obtained through Google APIs is limited to security incident investigation and is not conducted for product improvement or training purposes.
The Service is intended solely for users 18 years of age or older. We do not knowingly collect personal information from minors. If we learn that we have collected information from a person under 18, we will delete it promptly. If you believe we have inadvertently collected such information, please contact us immediately.
Your information may be transferred to and processed in the United States or other countries whose data protection laws may differ from, and may be less protective than, those of your home jurisdiction. By using the Service, you consent to such transfers. For transfers from the EEA or UK, we rely on appropriate safeguards as required by applicable law, such as standard contractual clauses.
The Service may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those third parties. We are not responsible for the privacy practices of any third party, and we encourage you to review their privacy policies before providing any information to them.
We may update this Privacy Policy at any time by posting the revised version with an updated "Last updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated Policy. We are not obligated to provide individual notice of changes beyond updating this page. Material changes affecting how we use Google user data will be communicated as required by Google's API policies.
For privacy-related inquiries or to exercise your data rights, contact us at: robbinaglie@gmail.com