1. Who this policy covers

This Privacy Policy explains how SelfRep, a product operated by Nowadays ("SelfRep," "Nowadays," "we," or "us"), handles personal information when you visit our website, create a SelfRep account, connect an integration, use our creator CRM or AI features, apply for beta access, or contact us.

SelfRep is separate from Nowadays talent representation. We do not move your connected Gmail content, brand contacts, deal history, or earnings into agency recruiting or representation systems unless you deliberately submit information through a separate application.

2. Information we collect

Account and creator profile

We collect your name, email address, Google account identifier, TikTok handles, business details, location, time zone, niches, rate card, sales metrics you enter, negotiation rules, notification preferences, and account settings.

Gmail data, only after a separate connection

If you connect Gmail, SelfRep may access and store the messages and threads needed to identify and manage brand opportunities, including senders, recipients, subject lines, message text, dates, message and thread identifiers, labels or read state, and attachment names, types, and sizes. SelfRep may organize messages and show you which brand threads need attention. It sends or modifies messages only when you enable SelfRep automation or explicitly take a send action yourself.

We store an encrypted Google refresh token so the connection can keep working. We do not store your Google password.

Forwarded emails and CRM records

If you use the forwarding-only workflow, we receive only the emails you deliberately forward to your private SelfRep address. We also store deal terms, offers, contacts, deliverables, drafts, approvals, posts, Spark codes, usage periods, invoices, payments, renewals, reminders, and your actions inside the product.

Integrations, billing, and service activity

We store Telegram identifiers and notification activity if you connect Telegram. Stripe handles card details; we receive billing status, plan, customer and subscription identifiers, and transaction events rather than your full card number. We also collect support messages, application forms, security logs, device or browser data, IP address, timestamps, feature actions, and error information.

3. How we use information

• Authenticate you and operate your private workspace.
• Sync and display connected brand email.
• Identify opportunities and capture stated deal terms.
• Create drafts, replies, counters, follow-ups, and reminders when enabled.
• Track deliverables, approvals, invoices, payments, usage, and renewals.
• Send Telegram or in-product alerts you request.
• Process subscriptions, prevent fraud, and keep audit records.
• Debug, secure, support, and improve SelfRep.
• Comply with law and enforce our Terms.

4. Google Workspace data and Limited Use

SelfRep's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We use Google Workspace data only to provide and improve the user-facing Gmail and deal-management features you request. We do not use it for targeted advertising, sell it, build a shared brand-contact network, determine whether to recruit you for representation, or use it to train a general or shared AI model. Human access is limited to cases where you ask for support, where access is necessary for security or abuse investigation, or where law requires it.

You can disconnect Gmail in SelfRep and can also revoke access from your Google Account permissions. Disconnecting removes the active authorization token and pauses email automation. Existing deal and message history may remain until you request deletion so your records do not disappear unexpectedly.

5. AI processing

SelfRep may send the minimum relevant message context, creator rules, and deal facts to contracted AI providers to classify a conversation or capture terms. SelfRep may also use that context to prepare a response. Providers may process that data only to supply the requested service to SelfRep and are not permitted to use it to train public or shared models.

We keep AI inputs, outputs, decisions, confidence, approvals, overrides, and send events when needed to explain product behavior, prevent duplicate sends, investigate errors, and improve your private workflow. We do not silently treat an AI guess as a confirmed deal term.

6. When we share information

We share information only as needed with:

• Google for sign-in and Gmail connection.
• Hosting, database, backup, queue, email-ingestion, monitoring, and support providers.
• Contracted AI providers when an AI-assisted feature needs relevant context.
• Stripe for subscriptions and payment administration.
• Telegram when you ask us to deliver alerts there.
• Professional advisers, authorities, or transaction parties where legally necessary and appropriately protected.

We do not sell personal information. We do not share Gmail content with brands, other creators, or Nowadays representation without your explicit action or separate permission.

7. Retention, export, and deletion

We retain account, deal, email, audit, and billing records for as long as needed to provide SelfRep, preserve your deal history, meet legal obligations, settle disputes, and keep the service secure. The exact period depends on the record and why it is needed. Encrypted backups may retain deleted data for a limited recovery period before aging out.

You may request an export or account deletion from Settings or by emailing support@nowadays.media. We may verify your identity before completing a request. A deletion request pauses automation immediately; completion may exclude records we must keep for security, fraud, billing, tax, dispute, or legal reasons.

8. Your choices and rights

You can update profile and negotiation settings, pause automation, change notification preferences, disconnect Gmail or Telegram, and manage billing from the product. Depending on where you live, you may also have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. Contact us to exercise a right. We will not discriminate against you for making a valid request.

9. Security

SelfRep uses technical and organizational safeguards designed for a connected-email SaaS, including encrypted Gmail refresh tokens, hashed session tokens, workspace-level data separation, secure cookies, signed provider webhooks, request validation, send idempotency, audit events, restricted administrator access, backups, and transport encryption in production.

No online service can promise perfect security. Keep your Google and SelfRep accounts secure, do not share login access, and notify us promptly at support@nowadays.media if you suspect unauthorized activity.

10. Age, international use, and changes

SelfRep is for users age 18 or older and is not directed to children. Your information may be processed in countries where we or our service providers operate, subject to appropriate protections. We may update this policy as the product changes. We will change the effective date and provide additional notice when a change is material.

11. Contact

Questions, privacy requests, and security reports can be sent to support@nowadays.media.