Privacy policy
Effective November 10, 2026
The short version
- Towerly reads the mail accounts you connect so it can sort your mail and draft replies.
- Nothing is sent, moved or deleted unless you do it yourself or approve it.
- Message text is processed by an AI model to sort and draft. It is not used to train AI models.
- We don’t sell your data and we don’t show ads.
- You can disconnect an account or have everything deleted at any time.
Who we are
Towerly is an app that sorts your email, drafts replies and helps you plan your day. It is operated by Derik Silva in Danville, California (“Towerly”, “we”, “us”). You can reach us at support@towerly.app.
This policy covers the Towerly apps and this website. Towerly is in private beta, and we’ll update this page as the product changes.
What we collect
Your Towerly account
When you sign in with Apple or Google, we receive your name and email address, and we create an account for you.
The mail accounts you connect
For each account you connect, we store its address and a credential that lets Towerly reach it: a sign-in token from your provider or an app password. Credentials are stored encrypted. They are never displayed again, to you or to us.
Your mail
For the accounts you connect, Towerly syncs recent mail and new mail as it arrives. For each message we store the sender, recipients, subject, date, the text and formatted version of the message, whether it is read or flagged, and the name, type and size of any attachments.
The contents of attachments are not stored on our servers. When you open an attachment, Towerly fetches it from your mailbox and keeps a copy on your device until you sign out.
What Towerly works out from your mail
To do its job, Towerly creates and stores: which lane and category a thread belongs to, what a message is asking for, dates and commitments it finds, a list of the people you correspond with, drafts and other proposals, the rules you set, and a ledger of everything that was proposed, approved, sent or undone.
Calendar and contacts
If you allow it, Towerly reads your calendar on your device to show your day, and matches contact photos to senders on your device. This information is not uploaded to our servers. Calendar holds you approve are written to a “Towerly” calendar on your device.
Device and log information
We store a push notification token and your device type so we can notify you. Our servers keep limited technical logs, such as IP address, time and the request made, to keep the service secure and to fix problems.
This website
This website sets no cookies and runs no analytics or advertising trackers. Our web host keeps standard request logs.
How we use it
- To provide Towerly: sorting mail, drafting replies, showing your day, sending what you approve, and notifying you.
- To keep the service secure, prevent abuse and fix problems.
- To comply with the law.
We do not sell your personal information, share it for advertising, or use it to build profiles for anyone else.
How AI is used
To sort mail and write drafts, Towerly sends the text of the relevant messages to Claude, an AI model made by Anthropic, through Anthropic’s API. Anthropic processes this text on our behalf as a service provider, and its commercial terms do not allow it to train its models on it.
Towerly does not use your mail to develop, improve or train generalized AI or machine learning models. Drafts are suggestions written by software and can be wrong. Nothing a model writes is sent until you approve it.
Google user data
Towerly’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:
- We use data from your Google account only to provide and improve the features you see in Towerly.
- We do not transfer it to others except to provide those features, to comply with the law, or as part of a merger or acquisition with notice to you.
- We do not use it for advertising.
- People at Towerly do not read it unless you give us permission for specific messages, it is necessary for security or to comply with the law, or the data has been aggregated and anonymized for internal operations.
You can remove Towerly’s access to your Google account at any time at myaccount.google.com/permissions.
Who we share it with
We use a small number of companies to run Towerly. Each receives only what it needs to do its part.
| Company | What it does for Towerly |
|---|---|
| Supabase | Database and sign-in, hosted in the United States |
| DigitalOcean | Servers that sync and sort your mail |
| Anthropic | AI processing to sort mail and write drafts |
| Apple | Sign in with Apple and push notifications |
| Sign in with Google and access to the Google mail accounts you connect | |
| Vercel | Hosting for this website |
When you send mail from Towerly, it goes through your own mail provider. When Towerly looks up a sender’s logo, it asks that sender’s website for it, using only the domain name. Pictures inside an email load from the sender’s servers when you open the message, which can tell the sender it was opened. You can turn this off in Settings.
We may disclose information if the law requires it, or to protect the safety and rights of our users or the public. If Towerly is ever acquired or merged, your information may transfer to the new owner, and we will tell you first.
Keeping and deleting your data
We keep your data while your account is open. You control it in these ways:
- Remove a mail account in the app. Its credential is deleted immediately, and you choose whether the mail synced from it is removed from Towerly as well.
- Ask us to delete your Towerly account by writing to support@towerly.app. We delete your data from our live systems within 30 days. Backups are overwritten on a rolling schedule after that.
Removing data from Towerly never deletes anything from your mailbox.
Security
Data is encrypted in transit. Credentials are kept in an encrypted vault. Each account can read only its own data. Every send is recorded in a ledger. No system is perfectly secure, and if a breach affects your information we will tell you as the law requires.
Your choices and rights
You can ask for a copy of your data, ask us to correct it, or ask us to delete it by writing to support@towerly.app. We will answer within 45 days.
If you live in California, you have the right to know what personal information we collect and how we use it, to correct it, to delete it, and not to be treated differently for exercising those rights. We do not sell personal information or share it for cross-context behavioral advertising.
Children
Towerly is for adults. It is not directed to children under 13, and we do not knowingly collect their information.
Where data is processed
Towerly is operated from the United States, and your information is processed there.
Changes to this policy
If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.
Contact
Questions or requests: support@towerly.app.