Privacy Policy

Google account information.When you sign in with Google, we receive your name and email address from Google's authentication service.

Gmail data. With your explicit permission, HawkReturn accesses your Gmail inbox using read-only scope. We scan emails for order confirmations and shipping notifications from online retailers. We extract only the following data points from those emails: retailer name, estimated delivery date, and any return window information. We do not read, store, index, or process any other email content.

Account data.We store your email address, the purchases we've detected, their return deadlines, and your notification preferences.

Usage data. We collect basic usage logs (pages visited, features used) to improve the product. We do not sell this data.

We use your information solely to:

• Identify online purchases from your Gmail inbox
• Calculate return window deadlines per retailer
• Send you reminder emails before deadlines close
• Maintain and improve the HawkReturn service
• Communicate with you about your account

We do not use your data for advertising, profiling, or any purpose unrelated to return deadline tracking.

HawkReturn's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Gmail data to provide the return tracking service you signed up for
• We do not transfer Gmail data to third parties except as necessary to provide the service
• We do not use Gmail data for serving advertisements
• We do not allow humans to read your Gmail data unless you have given explicit permission, it is necessary for security purposes, or we are required to by law

We do not sell your personal data. We do not share your personal data with advertisers.

We share data with the following service providers, solely to operate HawkReturn:

• Supabase - database storage (encrypted at rest)
• Resend - sending reminder emails to you
• Vercel - hosting the application
• Google LLC - authentication and Gmail access

Each provider is bound by their own data processing terms.

We retain your account data for as long as your account is active. If you delete your account or disconnect Gmail access, we delete your associated data within 30 days.

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw Gmail access at any time via your Google Account permissions
• Object to our processing of your data

To exercise any of these rights, email us at hello@hawkreturn.com.

We use industry-standard security practices including TLS encryption in transit, encryption at rest, and access controls. See our Security page for details.

HawkReturn is not directed at children under 13. We do not knowingly collect data from children under 13. If you believe we have, please contact us.

We may update this policy as the product evolves. We will notify you by email of material changes. Continued use of HawkReturn after changes constitutes acceptance.

Questions about this policy: hello@hawkreturn.com