Privacy Policy

What this covers

Thalam is an outreach sequencing tool for small businesses and independent professionals. This policy explains what data Thalam collects, how it's used, and — because Thalam can connect to your Gmail account to send email on your behalf — specifically what that connection does and doesn't give Thalam access to.

Gmail access

When you connect Gmail, Thalam requests exactly one Gmail permission: the ability to send email as you. Thalam cannot read your inbox, cannot see your existing emails, cannot modify or delete anything in your mailbox, and cannot see your contacts. Google classifies this as a sensitive, not restricted, scope — the narrowest permission Google offers that still allows sending mail through your account.

Thalam also requests your Google account email address, used only to confirm which Gmail account is connected and to display it back to you in Settings.

The OAuth token Google issues for this connection is encrypted (AES-256) before it's stored, and is never included in a data export or shown in the product UI. Disconnecting a Gmail account in Settings removes this token.

What Thalam stores

To provide the product, Thalam stores:

• Your account information (name, email, and profile fields you set in Settings — signature, calendar link, phone).
• Leads you add or import — name, email, phone, company, notes, and any contact-preference settings you record for them.
• The sequences, templates, and message snippets you create.
• A record of messages sent through Thalam (subject, body, timestamp, and delivery status) — this is what lets you see your own send history and what a recipient sees if they view the audit trail behind their own data.
• An internal audit log of account and data changes, used for security and support — this is not shared and is not part of your data export (see below).

What Thalam does not do

• Thalam does not sell your data or your leads' data to anyone.
• Thalam does not use Gmail data to train any AI/ML model.
• Thalam does not read, search, or process the contents of your Gmail inbox — the send-only scope described above makes this impossible even in principle, not just a policy choice.

Your data, your control

A full export of your company's data (leads, sequences, messages, templates, snippets, and connected-channel status) is available at any time from Settings. The export never includes the encrypted Gmail token itself.

Closing your account from Settings schedules it for deletion in 14 days — during that window you can restore it. After 14 days, your data is permanently purged, including the connection to Gmail.

Outreach and unsubscribe

Every email sent through Thalam includes a working unsubscribe link, unique to the recipient, that requires no account or login to use. A recipient can stop contact on any single channel or all channels at once. Suppressed recipients are never contacted again through that channel, enforced at the point of send, not just recorded.

Contact

Questions about this policy or your data: reach the Thalam team through the contact details in your account's Settings page, or via the connected support channel for your account.