Privacy Policy

Welcome to Avocabo ("Avocabo", "we", "us", "our"). We're building a daily newsletter digest — one curated email instead of fifty unread ones. This Privacy Policy explains what information we collect, why we collect it, and how we handle it.

The short version: Avocabo is pre-launch. The only personal data we collect today is the email address you give us on the waitlist and an optional free-text note about why you signed up. We never sell your data, we use privacy-friendly analytics, and we will never modify the inbox you eventually connect.

This Privacy Policy applies to anyone who visits our site, joins our waitlist, or uses our service when it launches. Different sections apply depending on what you choose to share with us.

When you submit the waitlist form, we store:

• Email address — so we can email you when your spot is ready.
• Free-text note — the optional "what made you sign up" field, if you fill it in. We read these to understand who's joining and improve the product.

That's it. We do not require a name, phone number, profile, or any other information to join the waitlist.

• Privacy-friendly analytics — we use a self-hosted instance of Plausible Analytics (running on our own infrastructure). Plausible does not use cookies, does not track you across sites, and does not collect personal information. It tells us aggregate page view counts and referrer sources — nothing more.
• Session-level UX research — we may use Microsoft Clarity to understand how people interact with our pre-launch pages (clicks, scrolls, navigation). Clarity anonymizes data and does not identify individual users.
• Error reports — we use Sentry to capture JavaScript errors so we can fix bugs. Error reports may include your browser type, operating system, and the page URL where the error occurred. They do not include personal information.

We do not set any first-party tracking cookies. The waitlist form does not require a session, so no login cookie is involved either. Third-party tools we integrate (such as Clarity) may set their own cookies — see their respective privacy policies for details.

When Avocabo launches, you will be able to connect a Gmail or Outlook inbox so we can build your daily digest. At that point we will additionally collect:

• OAuth tokens — read-only access tokens that let us read the newsletters in your inbox. We never request write, send, or delete permissions. You can revoke our access from your Google or Microsoft account at any time.
• Newsletter content — the bodies of newsletter emails we read on your behalf, processed transiently to produce that day's digest. We do not keep a long-term archive of your newsletter content beyond the digest itself.
• Account preferences — your digest send time, paused/active state, and any per-newsletter exceptions you set.

If you prefer not to connect an inbox, you will be able to use a dedicated forwarding address instead — newsletters you forward there will be processed the same way without us ever touching your real inbox.

We use your information to:

• Run the service — deliver your daily digest, keep your preferences, and email you about your account.
• Improve the product — understand which sources and features people use, and fix errors.
• Communicate with you — send transactional emails (waitlist confirmation, digest delivery, magic-link sign-in) via Resend. We do not send marketing emails outside of the digest you signed up for.

We do not sell, rent, or share your personal data with advertisers or data brokers. We do not train AI models on the content of your inbox.

We use a large language model (currently OpenAI's GPT-4o-mini) to summarize the newsletters in your inbox into your daily digest. To do this, the bodies of newsletter emails are sent to OpenAI for the duration of summarization. We do not send your account details, email address, or saved preferences to the model.

We rely on a small number of third-party services to run Avocabo:

Each service has its own privacy policy. We encourage you to review them if you have questions about how they handle data.

Your data is stored on servers hosted by Hetzner in the European Union. We use encryption in transit (HTTPS) and follow standard security practices to protect your information.

You can:

• Access the email address and note you gave us on the waitlist by emailing [email protected].
• Delete your waitlist entry — and, after launch, your account and all associated data — at any time by emailing us or using the account-settings page (when available).
• Unsubscribe from any communication via the link in every email we send.

If you are in the EU, you have additional rights under the GDPR, including the right to data portability and the right to lodge a complaint with a supervisory authority.

Avocabo is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us so we can delete it.

We may update this Privacy Policy from time to time. When we do, we will update the date at the top. Continued use of Avocabo after changes are posted means you accept the updated policy. If the changes are material, we will notify you by email.

If you have questions about this Privacy Policy or your data, reach us at [email protected].