Privacy Policy

Pounce provides hosted lead capture and AI-assisted lead response tools for businesses. This policy explains what we collect, how we use it, and the choices available to account owners.

Information We Collect

We collect account information such as name, email address, password hash, business profile details, plan, billing status, form settings, email sender settings, and usage records.

When a visitor submits a Pounce-powered form, we collect the information submitted through that form, such as name, email address, phone number, message, source URL, browser metadata, and related lead activity.

How We Use Information

We use account and lead data to operate Pounce, authenticate users, process form submissions, generate AI-assisted replies, send lead notifications, enforce usage limits, provide support, prevent abuse, and manage billing.

Lead data may be sent to configured AI and email providers only as needed to generate and deliver lead replies.

Email Provider Data

Pounce lets account owners configure outbound email sending through Pounce, Resend, Google, Outlook/Microsoft 365, or advanced SMTP.

For Resend, we store the API key encrypted and use it only to send lead replies from the configured sender address.

For Google and Outlook/Microsoft 365, we store OAuth tokens encrypted and use them only to send lead replies from the connected mailbox. Pounce does not store your Google or Microsoft password.

For advanced SMTP, we store SMTP credentials encrypted. Resend or OAuth is recommended for most customers because provider access can be revoked without sharing a mailbox password.

Google API Limited Use

If you connect a Google account, Pounce requests permission to send email from the connected mailbox. Pounce uses Google user data only to provide or improve user-facing email sending features. We do not sell Google user data, use it for advertising, or transfer it except as necessary to provide the service, comply with law, or protect users.

Microsoft OAuth Use

If you connect a Microsoft account, Pounce requests delegated permission to send email from the connected mailbox. We use Microsoft account access only to send lead replies you have enabled through Pounce.

Payments

Payments are processed by Stripe. Pounce stores Stripe customer and subscription identifiers, but does not store full payment card numbers.

Data Sharing

We share data with service providers that help us run Pounce, including hosting, database, analytics, AI, email, and payment providers. We do not sell customer lead data.

Data Retention

We retain account, billing, form, lead, and usage data while your account is active and as needed for legal, security, support, and operational purposes. You can contact us to request deletion of your account data, subject to legal and billing record requirements.

Your Choices

You can update your business profile, form settings, and email sender settings from your account. You can revoke Google or Microsoft access from your provider account settings. You can rotate or remove Resend and SMTP credentials from Pounce.

Security

We use reasonable technical and organizational measures to protect account and lead data. Secrets such as API keys, SMTP passwords, and OAuth tokens are encrypted before storage. No internet service can be guaranteed completely secure.

Children

Pounce is intended for business use and is not directed to children under 13.

Changes

We may update this policy from time to time. The updated version will be posted on this page with a new effective date.

Contact

Questions about privacy? Contact us at hello@pouncefirst.com.