Privacy Policy

We collect the email address and login details needed to create your account, send sign-in links, keep sessions active, and protect the product from abuse. If you sign in with Google, we use the account details Google provides for authentication.

We store the campaigns, messages, target lists, company lists, send history, pipeline notes, and settings you create inside DM Faster so the product can run and avoid repeat outreach.

When you connect an agent or MCP host, DM Faster shares the workspace records requested through its tools within the permissions you approve. This can include company research, prospect lists, campaign settings, messages and job results. We store connection identity, permissions, expiry and revocation records, and token hashes needed to authenticate the connection. Tool results do not expose your provider credentials or browser cookies.

Selected context mentions read the referenced workspace records. If you subscribe to job updates, DM Faster sends job status, saved-result references, counts and credit usage to the subscribed host. You can revoke the connection in Agent access settings to stop future access and subscribed deliveries. Information already shared with a host is also subject to that provider's privacy and retention practices.

When you submit a website through our trial form, we save its domain, the form placement and page language before registration, even if you do not finish creating an account. We discard the website path, query and fragment. After you verify your account, we link the request to your name and email so our team can follow up. This does not activate a subscription.

Uncompleted website submissions are eligible for automatic deletion after 30 days, and completed trial requests after 180 days. Deletion runs in bounded batches. Booking a call is optional and uses Cal.com; we do not prefill your contact details into its embedded URL.

Basic can import Instagram follower data you choose to extract. Enterprise can search company records, company websites, public business information, and social profiles that are used for B2B prospecting.

The Chrome extension uses your logged-in browser sessions to open supported platforms, prepare chats, and send the outreach you configure. We store limited diagnostics and run events so campaigns can be monitored, resumed, and supported.

We use providers for hosting, database storage, billing, analytics, email delivery, lead enrichment, authentication, and error monitoring. They process data only as needed to provide their part of the service.

Our public website uses Vercel Web Analytics and Speed Insights. Vercel reports aggregated, cookie-free traffic and performance data. We also record anonymous clicks on demo, trial, sign-in, and language controls with only the control placement and page language added by us; Vercel may associate the event with the visited page path. We never add names, email addresses, link text, query strings, or user identifiers to an event.

With your permission, we use PostHog in its EU region to connect website visits, product steps, verified account creation, subscriptions and extractor purchases. Random browser and session identifiers work across dmfaster.com and app.dmfaster.com. After sign-in, an opaque account identifier connects these steps. Events include approved page paths, campaign labels, referring domains, country, device category, extraction counts and paid or refunded amounts with their currency, subscription status and whether results were accessed through the website, API or MCP. Purchase attribution records your analytics choice at checkout.

We do not send email addresses, entered Instagram handles, passwords, access tokens, messages or extracted profiles to PostHog. Recordings and automatic interaction capture are disabled. Analytics choices last 180 days; the browser identifier expires after 90 days without use. Do Not Track and Global Privacy Control disable this tracking. Rejecting analytics clears the identifiers and stops browser tracking. We also request removal of stored purchase attribution to stop future linked server events. This does not delete events already collected.

If you connect Gmail, DM Faster uses the send permission only for messages you configure to recipients who explicitly agreed to receive email from you, including recipients who ask to continue by email after a conversation on Instagram, Facebook, or LinkedIn, and for replies you write in Unibox. Unsolicited commercial email is not permitted. DM Faster does not offer email warm-up. Users set per-account daily sending limits in Settings; email provider limits also apply.

The current Gmail connection is send-only. DM Faster does not read Gmail inbox messages, attachments, or delivery failures and does not synchronize them into Unibox. DM Faster does not change Gmail labels, drafts, messages, or mailbox settings.

If you connect Google Calendar, DM Faster reads busy periods from your primary calendar to avoid conflicts and accesses events on calendars you own to create and retrieve the meeting you approve, add Google Meet details, and email invitations. We do not use this access to edit or delete unrelated calendar events.

The use of information received from Google Workspace APIs by DM Faster adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google Workspace data, use it for advertising, or use it to create, train, or improve generalized machine learning or artificial intelligence models.

We use the usage-based OpenAI API platform for visible assistant, copy, classification, and voice features. When you deliberately use an assistant feature, the minimum relevant workspace content may be sent to OpenAI to produce that result. If you ask the assistant to inspect content already visible in DM Faster, this may include only the minimum relevant text needed for that result.

Company website research also uses TypeSafe to evaluate company names, your research criteria and relevant website excerpts. Those research requests do not include Gmail messages or Google Calendar records.

DM Faster does not permit OpenAI to use Google Workspace data for model training or other secondary purposes and does not opt that data into provider feedback, evaluation, or training programs. We do not use a self-hosted or offline AI model for these features.

Billing details are handled by our payment provider. We store subscription status, plan information, customer identifiers, billing email, renewal dates, and payment event metadata needed to manage access.

We keep workspace data while your account is active and for as long as needed to operate the service, comply with legal obligations, prevent abuse, resolve disputes, and maintain billing records.

You can delete your account from Settings. Some limited records may remain when required for billing, security, legal compliance, or fraud prevention.

You can also disconnect Gmail or Google Calendar at any time. Disconnecting removes the stored OAuth credentials and stops future API access. Existing workspace records are handled under the retention and deletion rules above.

You can update settings, sign out sessions, delete your account, and request help with access or deletion questions.

We use technical and organizational safeguards to protect data. No system is perfectly secure, so you are responsible for keeping your email account, Google account, browser, and platform sessions secure.