Privacy Policy
Last updated: 14 November 2026
This policy explains how OutsourceForce.ai ("OSF", "we", "us") handles personal data in the OSF AI Hub (the "Service"), including the Email Drafts service. We act as a data processor for the business clients who use the Service, and as a controller for our own account and billing data.
What we collect
- Account data: your name, work email, company name and country.
- Mailbox data (Email Drafts only): when you connect Gmail (or, later, Outlook), we access the emails needed to write reply drafts: the message you received, its thread, and a sample of your own sent emails so the drafts match your writing style.
- Your settings: the reply rules and signature you enter.
- Usage data: how many drafts were written and the AI cost, for billing.
How we use it
- To write reply drafts and save them in your own mailbox, in the same email thread. We never send emails on your behalf.
- To learn and apply your writing style and your rules.
- To run, secure and bill the Service, and to support you.
We do not sell your data, use it for advertising, or use it to train AI models.
Google user data (Limited Use)
OSF AI Hub's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We only use Gmail data to provide the Email Drafts feature you can see in the Service (reading new emails and saving reply drafts).
- We do not transfer Gmail data to others, except to the AI provider that writes the draft (as a processor, under contract, without training on it), when needed for security or the law, or as part of a merger with your notice.
- We do not use Gmail data for advertising, and people at OSF do not read your emails unless you ask us to for support, it is needed for security, or the law requires it.
Who processes data for us
- Supabase – database and sign-in, hosted in the EU (Ireland).
- Vercel – hosts the website.
- OpenAI – writes the reply drafts. Data sent through the API is not used to train their models.
- Resend – sends our sign-in and service emails.
- Google / Microsoft – your mailbox provider, through the connection you approve.
How long we keep it
Email content is processed to write a draft and is not kept by us afterwards, apart from a short record of each draft (sender name, subject, time and usage) for your "Recent" list and billing. Account data is kept while your account is active and deleted within 30 days after it closes, unless the law requires us to keep it longer. You can disconnect your mailbox at any time, which stops all access straight away.
Your rights
Under the GDPR you can ask to access, correct, export or delete your personal data, or object to how it is used. You can also complain to your data protection authority (in Ireland, the Data Protection Commission). To make a request, email us at success@profitabletradesmen.com.
Security
Data is encrypted in transit and at rest. Mailbox access tokens are stored in locked storage that only our server-side engine can read, and every client can only ever see their own company's data.
Contact
OutsourceForce.ai · success@profitabletradesmen.com