towerly

Privacy policy

Effective November 10, 2026

The short version

  • Towerly reads the mail accounts you connect so it can sort your mail and draft replies.
  • Nothing is sent, moved or deleted unless you do it yourself or approve it.
  • Message text is processed by an AI model to sort and draft. It is not used to train AI models.
  • We don’t sell your data and we don’t show ads.
  • You can disconnect an account or have everything deleted at any time.

Who we are

Towerly is an app that sorts your email, drafts replies and helps you plan your day. It is operated by Derik Silva in Danville, California (“Towerly”, “we”, “us”). You can reach us at support@towerly.app.

This policy covers the Towerly apps and this website. Towerly is in private beta, and we’ll update this page as the product changes.

What we collect

Your Towerly account

When you sign in with Apple or Google, we receive your name and email address, and we create an account for you.

The mail accounts you connect

For each account you connect, we store its address and a credential that lets Towerly reach it: a sign-in token from your provider or an app password. Credentials are stored encrypted. They are never displayed again, to you or to us.

Your mail

For the accounts you connect, Towerly syncs recent mail and new mail as it arrives. For each message we store the sender, recipients, subject, date, the text and formatted version of the message, whether it is read or flagged, and the name, type and size of any attachments.

The contents of attachments are not stored on our servers. When you open an attachment, Towerly fetches it from your mailbox and keeps a copy on your device until you sign out.

What Towerly works out from your mail

To do its job, Towerly creates and stores: which lane and category a thread belongs to, what a message is asking for, dates and commitments it finds, a list of the people you correspond with, drafts and other proposals, the rules you set, and a ledger of everything that was proposed, approved, sent or undone.

Calendar and contacts

If you allow it, Towerly reads your calendar on your device to show your day, and matches contact photos to senders on your device. This information is not uploaded to our servers. Calendar holds you approve are written to a “Towerly” calendar on your device.

Device and log information

We store a push notification token and your device type so we can notify you. Our servers keep limited technical logs, such as IP address, time and the request made, to keep the service secure and to fix problems.

This website

This website sets no cookies and runs no analytics or advertising trackers. Our web host keeps standard request logs.

How we use it

We do not sell your personal information, share it for advertising, or use it to build profiles for anyone else.

How AI is used

To sort mail and write drafts, Towerly sends the text of the relevant messages to Claude, an AI model made by Anthropic, through Anthropic’s API. Anthropic processes this text on our behalf as a service provider, and its commercial terms do not allow it to train its models on it.

Towerly does not use your mail to develop, improve or train generalized AI or machine learning models. Drafts are suggestions written by software and can be wrong. Nothing a model writes is sent until you approve it.

Google user data

Towerly’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

You can remove Towerly’s access to your Google account at any time at myaccount.google.com/permissions.

Who we share it with

We use a small number of companies to run Towerly. Each receives only what it needs to do its part.

CompanyWhat it does for Towerly
SupabaseDatabase and sign-in, hosted in the United States
DigitalOceanServers that sync and sort your mail
AnthropicAI processing to sort mail and write drafts
AppleSign in with Apple and push notifications
GoogleSign in with Google and access to the Google mail accounts you connect
VercelHosting for this website

When you send mail from Towerly, it goes through your own mail provider. When Towerly looks up a sender’s logo, it asks that sender’s website for it, using only the domain name. Pictures inside an email load from the sender’s servers when you open the message, which can tell the sender it was opened. You can turn this off in Settings.

We may disclose information if the law requires it, or to protect the safety and rights of our users or the public. If Towerly is ever acquired or merged, your information may transfer to the new owner, and we will tell you first.

Keeping and deleting your data

We keep your data while your account is open. You control it in these ways:

Removing data from Towerly never deletes anything from your mailbox.

Security

Data is encrypted in transit. Credentials are kept in an encrypted vault. Each account can read only its own data. Every send is recorded in a ledger. No system is perfectly secure, and if a breach affects your information we will tell you as the law requires.

Your choices and rights

You can ask for a copy of your data, ask us to correct it, or ask us to delete it by writing to support@towerly.app. We will answer within 45 days.

If you live in California, you have the right to know what personal information we collect and how we use it, to correct it, to delete it, and not to be treated differently for exercising those rights. We do not sell personal information or share it for cross-context behavioral advertising.

Children

Towerly is for adults. It is not directed to children under 13, and we do not knowingly collect their information.

Where data is processed

Towerly is operated from the United States, and your information is processed there.

Changes to this policy

If we change this policy, we will update the date at the top. If a change is significant, we will tell you in the app or by email before it takes effect.

Contact

Questions or requests: support@towerly.app.