Privacy Policy

Effective date: August 21, 2026

Girderly LLC (“Girderly,” “we,” “us”) respects your privacy. This Privacy Policy explains how we handle information in two contexts: Part A — the Girderly Gmail™ add-on, which surfaces your JobTread data inside Gmail; and Part B — the Girderly website at girderly.com and your Girderly account. By using the Girderly add-on or the Girderly website, you consent to the practices described in this Policy. Girderly is provided by Girderly LLC, a Texas limited liability company.

Part A — The Girderly Gmail add-on

Girderly is designed to keep your data inside your own Google and JobTread accounts. The add-on runs on Google’s infrastructure and calls JobTread directly to display your information; it does not route your Gmail messages, or the JobTread records it displays (your contacts, jobs, status, and financials), through a Girderly server. Two limited items are sent to Girderly’s licensing and support service — your Google account email address, and, when you first connect your JobTread account, a minimal connection signal — each described below. Connecting to JobTread uses JobTread’s own authorization screen (OAuth); during that one-time step, your JobTread access credential passes briefly through Girderly’s authorization service to complete the secure exchange, and is then stored only in your Google account, as described below.

Google user data Girderly accesses

Girderly requests the narrowest Google account permissions it needs to work. The Google user data it accesses is limited to the following:

• The sender’s email address of the message you are currently viewing. This is read from Gmail message metadata (the gmail.addons.current.message.metadata permission) at the moment you open an email, so Girderly can identify which JobTread contact the message relates to. Girderly does not read message bodies, subject lines, attachments, or labels, and it never reads or lists your mailbox as a whole.
• Your Google account email address. When you use the add-on, Girderly reads your Google account email address through Google’s OpenID Connect sign-in (the openid and userinfo.email permissions), so it can identify your account for subscription and licensing. This method is required because a published add-on must reliably identify signed-in users by email. Girderly does not read your name, photo, or any other profile information.

That is the complete set of Google user data Girderly can access. Girderly requests no Google “restricted” scopes and accesses no other Google service data.

How Girderly uses Google user data

• The sender’s email address is used solely to look up the matching contact, vendor, or job in your JobTread account and display it in the Gmail sidebar. It is used only at the moment you open the message and is not retained afterward.
• Your Google account email address is used to identify your account and to establish and manage your free trial and subscription. For this purpose it is sent to Girderly’s licensing service and stored on our servers (see Part B) — for example, to start and track your 7-day trial, confirm your access, and record your subscription status. It is not used to read your mail.
• Girderly does not use Google user data for advertising, does not sell or rent it, does not transfer it to anyone except as needed to provide the feature you request, and does not use it to develop, improve, or train generalized artificial-intelligence or machine-learning models. This use complies with the Google API Services User Data Policy, including the Limited Use requirements.

Other information the add-on handles

• Your JobTread authorization. You connect Girderly to JobTread through JobTread’s own authorization screen (OAuth) — you do not enter or paste any key. The resulting JobTread access credential is stored privately in your Google account (Apps Script user properties) and is used only to call JobTread on your behalf. It is not Google user data. During the one-time connection, the credential passes momentarily through Girderly’s authorization service to complete the secure exchange; it is not retained there — the temporary handoff record is deleted promptly (within 15 minutes) — and it is not stored on Girderly’s servers thereafter.
• JobTread data. Using your JobTread authorization, Girderly retrieves contact, job, status, and financial information from your JobTread account and displays it in the Gmail sidebar. It fetches this data on demand to render the card and does not store it.
• JobTread connection signal. When you first connect your JobTread account through JobTread’s authorization screen, the add-on sends Girderly a one-time connection signal: your Google account email address, which email platform you use, and your JobTread organization identifier and role, together with the date you connected. We store this with your account record (see Part B) so we can confirm your setup is complete, help you if you contact support (for example, to check whether your JobTread connection is working), send you a setup-confirmation message, and understand how many installs complete setup. Your JobTread access credential is never included, and none of your JobTread contacts, jobs, or financial data is sent or stored — only your organization identifier and role. This information is used only to run and support the product; it is never used for advertising.

How Girderly protects your information

• Encryption in transit. All data Girderly handles travels over encrypted HTTPS/TLS connections — between Gmail, Girderly’s add-on code running on Google’s servers, and the JobTread API.
• No server-side copies of your Gmail message data. Girderly operates no server that receives or stores your Gmail message data. The sender’s email address read from the message you are viewing is processed transiently, in memory, only for the duration of the request that renders the sidebar card; it is never written to a Girderly database or log. (Your Google account email address is handled separately — for licensing and trial/subscription management — as described above and in Part B.)
• Credentials stay in your Google account. Your JobTread access credential and settings are stored in your own Google account (Apps Script user properties), which Google isolates on a per-user basis. The credential passes through Girderly’s authorization service only transiently, to complete the one-time connection, and is not stored on Girderly’s servers.
• Least privilege. Girderly requests Gmail message metadata (the sender address) rather than message-content access, and requests no restricted scopes.
• Revocable at any time. Disconnecting or uninstalling Girderly revokes its access and removes the JobTread access credential and settings stored in your Google account. You can also revoke Girderly’s authorization at any time from your JobTread profile under Grants.

Google API Limited Use

Girderly’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Girderly uses Gmail message metadata solely to provide and improve the in-product features you request, and does not transfer, sell, or use this data for advertising, human review, or training generalized AI or machine-learning models.

Part B — The Girderly website and your account

This part covers information handled through the Girderly website at girderly.com — including our contact, trial-request, and support forms, our website chat assistant, analytics, advertising, your interactions with us on social media, and your billing and marketing relationship with us. It does not expand what the Gmail add-on can access; the add-on’s data handling is described in Part A above. We never use the Gmail add-on data described in Part A for analytics, advertising, or marketing.

Information you provide to us

Depending on how you interact with the website, you may provide:

• Contact and sales inquiries. When you use our contact form or request a demo, trial, or enterprise deployment, we collect your name, email address, and the contents of your message, and — where the form asks for it — your company name and phone number.
• Support requests. When you submit our “Report an Issue” form, we collect your name, email address, the Google account you use with Girderly, the issue type, and your description of the problem.
• Feature requests. If you send us a feature request, we collect your name, email, company (if provided), and the request itself.
• Website chat assistant. If you use the chat assistant on our site, we store the messages you send and our responses, together with basic technical details of the session (see below). Please do not enter passwords, API keys, or other sensitive information into the chat.
• Account and billing details. If you subscribe, we maintain your subscription record — the email address associated with your subscription and each seat, your plan, and its status.

Information collected automatically

When you visit the website, we and our service providers may automatically collect your IP address, browser type and user agent, the page you visited, the referring URL, and date/time stamps; standard visitor statistics collected by our website host and its built-in analytics; analytics data via Google Analytics; and, unless you opt out, online identifiers used for analytics and advertising (see “Analytics and advertising” below).

Social media and community interactions

We maintain a presence on social media and community platforms — for example, Instagram, LinkedIn, Facebook, and groups for the JobTread community. When you interact with us there — commenting on or reacting to our posts, mentioning or messaging us, following us, or leaving a review — we may collect and store your public profile information (such as your username or handle and your profile link), the content of your comment, message, or review, and related details such as the platform and the date. We use a social-media management provider (Metricool) to gather and organize these interactions. We use this information to respond to you and provide support, to understand feedback and sentiment about Girderly, to engage with and grow our community, and to identify people who may be interested in Girderly. This information reflects your public activity on those platforms, and your use of each platform remains governed by that platform’s own terms and privacy policy. If you would like us to remove information about you that we obtained from social media, please contact legal@girderly.com.

Combining information about you

To recognize you across the different ways you interact with us — the website, our forms, support, your subscription, and your public social-media activity — we may link and combine this information into a single profile. We tag each piece of information with how we are permitted to use it (for example, for service only, for marketing, or as public information), and we honor those limits. In particular, information from the Girderly Gmail add-on (Part A) is never combined into marketing profiles or used for advertising. You can ask us to access or delete the profile we hold about you at any time by emailing legal@girderly.com.

Cookies

Our website uses cookies and similar technologies to operate the site, remember your preferences, measure usage (including through Google Analytics and our website platform’s built-in statistics), and support advertising. Cookies fall into essential, analytics, and advertising categories; you can accept or decline non-essential cookies through our cookie controls, and most browsers let you refuse or delete cookies. If you decline, some parts of the site may not work as intended. The Girderly Gmail add-on itself does not use cookies.

Analytics and advertising

We use Google Analytics and advertising partners (including Google) to understand how our site is used, measure our marketing, and show you relevant ads on other sites and services, including retargeting. These partners may set cookies and receive online identifiers associated with your device or browser. Some U.S. state privacy laws treat this kind of sharing for cross-context behavioral advertising as a “sale” or “share” of personal information; we do not receive money for it. You can opt out at any time — see “Your privacy rights and choices” below. We never use data from the Girderly Gmail add-on (Part A) for analytics or advertising.

How we use website and account information

We use the information above to respond to your inquiries and provide customer support; provide, administer, and secure your Girderly subscription and account; operate, maintain, and improve the website and the product; detect and prevent spam, fraud, and abuse; engage with our community and understand feedback about Girderly, and identify people who may be interested in Girderly; send you service-related messages and, where permitted, newsletters, announcements, and marketing email; and to advertise and market our products, including through analytics and advertising partners. We do not use this information to make automated decisions that produce legal effects about you, and we never use Gmail add-on data (Part A) for marketing or advertising.

Billing

Subscription payments are processed by our third-party merchant of record, which handles the transaction and payment-card details on our behalf. Girderly does not receive or store your full payment-card number. We retain the subscription and seat information needed to provide and account for your subscription.

Free trial and account lifecycle

When you start Girderly’s free trial or subscribe, we record your Google account email address and related dates — such as when your trial starts and ends, and when you become or stop being a customer — in our systems so we can provide and manage your trial and subscription, confirm your access, send you trial- and account-related messages, and understand conversion. This information is stored with our database provider (Supabase) and, where you have not opted out, may be used to send you the trial and onboarding emails described under “Email and marketing communications.” You can opt out of marketing at any time.

When you connect your JobTread account through JobTread’s authorization screen, we also record that you have connected, your JobTread organization identifier and role, and the date of connection, so we can confirm your setup, provide support (including diagnosing an issue you report), send a setup-confirmation message, and measure how many installs complete setup. We do not store your JobTread access credential or your JobTread contacts, jobs, or financial data. This connection record is stored with our database provider (Supabase).

Email and marketing communications

We send service messages (such as confirmations, security notices, and account or subscription updates) that are necessary for your account. We also send newsletters and marketing email — for example, to people who start a trial or ask to hear from us — using our email provider (Mailchimp). Every marketing message includes an unsubscribe link, and you can opt out of marketing at any time; opting out will not affect service messages related to your account. Our email provider may record whether you open a message or click a link so we can gauge interest and improve our communications.

Service providers we use

We share information with a limited set of service providers who process it only to provide services to us and are required to protect it:

• WordPress.com (Automattic) — hosts girderly.com, provides visitor statistics, and provides Akismet spam filtering for our web forms.
• Google Analytics (Google) — website usage analytics and measurement.
• Advertising partners (including Google and Meta Platforms) — measurement and advertising, including retargeting on other sites and services.
• Supabase — the database that stores your form submissions, support tickets, feature requests, chat-assistant logs, account and subscription lifecycle records, your JobTread-connection records, your combined profile and social-interaction records, and the short-lived record used to complete your JobTread authorization (automatically deleted within 15 minutes).
• Render — hosts our customer-management application and related backend functions.
• Polar (our merchant of record) — processes subscription payments; card processing is handled by Stripe.
• Mailchimp (Intuit) — sends our newsletters and marketing and service email.
• Metricool — gathers and manages our social-media and community interactions (comments, messages, reviews, and public profile information) so we can respond and understand feedback.
• Google Workspace / Gmail — our support and business mailboxes (e.g. support@girderly.com) receive and store correspondence you send us.
• Our AI service provider — generates responses in the website chat assistant from the messages you send.

On the product side, the Girderly add-on communicates with JobTread using your own JobTread authorization, as described in Part A.

How we share information

We do not sell your personal information for money. We share it only: (a) with the service providers listed above; (b) with analytics and advertising partners for measurement and advertising as described in “Analytics and advertising,” which some U.S. state laws treat as a “sale” or “share” of personal information (you can opt out — see below); (c) when required to do so by law, legal process, or a lawful government request, or to protect the rights, property, or safety of Girderly, our users, or the public; and (d) in connection with a merger, acquisition, financing, or sale of assets, in which case we will require the recipient to honor this Policy or notify you of any material change. We never share Gmail add-on data (Part A).

Data retention and deletion

We keep website and account information — including your combined profile and any social-media and community information we hold — for as long as needed to provide the service, maintain your account, meet our legal and accounting obligations, and resolve disputes, after which we delete or anonymize it. You may ask us to access, correct, or delete the information we hold about you, including information obtained from social media, by contacting legal@girderly.com; we will respond consistent with applicable law. Data handled by the Gmail add-on is governed by Part A — it is stored in your own Google account and removed when you disconnect or uninstall.

Your privacy rights and choices

Depending on where you live (including California), you may have the right to: access or know the personal information we hold about you; delete it; correct it; opt out of the “sale” or “sharing” of your personal information and of targeted advertising; limit the use of sensitive personal information; port your information; and not be treated differently for exercising these rights. To exercise a request, email legal@girderly.com or use the choices below. We will take reasonable steps to verify your identity and will respond within 45 days (we may extend once by another 45 days and will tell you if we do). You may use an authorized agent with your written permission.

Your privacy choices — opting out

• Marketing email. Use the unsubscribe link in any marketing message, or email legal@girderly.com. Trial and prospective users are offered this choice, and you can opt out at any time.
• Analytics and advertising. Decline non-essential cookies through our cookie controls or your browser settings to opt out of analytics and advertising.
• Global Privacy Control (GPC). We treat a GPC browser signal as a request to opt out of the “sale” or “sharing” of your personal information for the browser that sends it, where required by law.

Do Not Track

Some browsers offer a “Do Not Track” (DNT) signal. Because there is no common industry standard for DNT, our website does not currently respond to DNT signals; however, we honor Global Privacy Control (GPC) signals as described above.

Sensitive personal information

We do not seek to collect or process “sensitive personal information” as defined under applicable privacy laws (such as government identifiers, precise geolocation, health, or biometric data). Please do not submit such information to us through the website, the chat, or a social-media message.

International users and data transfers

Girderly is based in the United States, and the information handled under this Part B is stored and processed in the United States and in other countries where we or our service providers operate. If you access the website or provide information to us from outside the United States, you understand that your information will be transferred to, stored, and processed in the United States, which may have data-protection laws different from those in your country. Where required for transfers of personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (together with the UK International Data Transfer Addendum), with the service providers that process the information.

Legal bases for processing (EEA and UK)

If you are in the European Economic Area (EEA), the United Kingdom, or Switzerland, we process your personal information on one or more of the following legal bases: to perform a contract with you or take steps at your request before entering into one; our legitimate interests in operating, securing, marketing, and improving our business and the website, weighed against your rights and interests; your consent, which you may withdraw at any time (for example, for certain marketing communications or non-essential cookies); and compliance with our legal obligations.

Your rights in the EEA, UK, and Switzerland

If you are in the EEA, the UK, or Switzerland, in addition to the choices described above you may have the right to request access to, and rectification or erasure of, your personal information; to restrict or object to our processing of it; to data portability; and to withdraw any consent you have given. To exercise these rights, email legal@girderly.com. For this personal information, the data controller is Girderly LLC. You also have the right to lodge a complaint with your local data-protection supervisory authority — in the UK, the Information Commissioner’s Office (ICO); in the EEA, your national supervisory authority. We will not treat you differently for exercising these rights.

Security

We take reasonable measures to protect your information, including encryption in transit (HTTPS/TLS), access controls, and reputable service providers. However, no method of transmission over the Internet or method of electronic storage is 100% secure, and we cannot guarantee absolute security.

Links to other sites

The website may link to sites we do not operate, including JobTread and Google. We are not responsible for the content or privacy practices of those sites, and we encourage you to review their privacy policies.

Children

Girderly is a business tool intended for adults. The Service is not directed to, and we do not knowingly collect personal information from, anyone under 18. If you are under 18, please do not use the Service or provide us with personal information. If we learn that we have collected personal information from someone under 18, we will delete it.

Changes to this Policy

We may update this Policy from time to time. Material changes will be reflected by updating the effective date above and, where appropriate, by a more prominent notice on the site.

Contact

Girderly LLC, Austin, Texas, USA. Questions about this Policy: legal@girderly.com.