Privacy Policy
Effective date: October 8, 2026
Nocket is run by Pietro Moz, doing business as Nocket ("Nocket", "we", "us"), 15805 Biscayne Blvd, Suite 311, North Miami Beach, FL 33160. We run a done-for-you cold email service at nocketai.com. This policy explains what we collect, why, and what we do with it. Questions: pietro@nocketai.com
Who this covers
This policy covers people who visit this site, create a Nocket account, or use the Nocket app.
People we may contact for our customers
We get business contact details (name, job title, work email, company) from Apollo, and we check emails with Hunter. We use them only to draft business emails for our customers. To be removed or to ask what we hold about you, use the unsubscribe link in any email or write to pietro@nocketai.com.
What we collect
- Account data. Your name, email address, and a hashed password. We never store your password in readable form.
- Billing data. Handled by Stripe. We store a Stripe customer ID and subscription status. We never see or store your card number.
- Lead data. Business contact details for the prospects we find for you, such as company name, contact name, job title, work email, and company domain. We store them so the app can score them and draft emails.
- Inbox connection data. When you connect Gmail, Outlook/Microsoft 365, or Zoho, we receive access and refresh tokens. See below.
- Usage data. Basic logs of app activity such as sign-ins, sends, and errors. Used to keep the service working.
- Email you send us. If you email us to start a trial or join a waitlist, we keep that thread so we can reply and set you up.
Email account access
If you connect a Google (Gmail) or Microsoft (Outlook.com or Microsoft 365) account, Nocket requests send-only permission: Google's gmail.send scope, or Microsoft's Mail.Send and offline_access permissions (offline_access only keeps the connection active without signing in again). Nocket cannot read, search, or delete your email. We send a message only after you tap Send in the app. Access tokens are stored encrypted, are never sold or shared, and are not used to train AI models. You can disconnect at any time in the app or in your Google or Microsoft account settings.
Google user data and Limited Use
Nocket requests this Google API scope:
https://www.googleapis.com/auth/gmail.sendso the app can send an email from your Gmail account when you tap Send.
ION, our reply assistant, is not live yet. If you choose to use it once it launches, it will also ask for https://www.googleapis.com/auth/gmail.readonly so it can read replies and draft answers for your review. We will not request that scope unless you turn ION on.
What we do with Gmail data. We send the messages you approve. Nothing sends without your approval in the app.
Limited Use disclosure. Nocket's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In plain terms:
- We do not use Google user data for advertising.
- We do not sell Google user data.
- We do not transfer Google user data to third parties except as needed to provide the service you asked for, to comply with law, or as part of a merger or acquisition with notice to you.
- We do not allow humans to read your Gmail data, except with your permission for a support request you raised, when required by law, or when needed for security such as looking into abuse.
- We do not use Google user data to train general AI models.
Where Gmail content goes. If you use ION, message content is sent to Anthropic's Claude API to return a draft. Anthropic does not use API inputs to train its models. No other third party receives Gmail content.
Token storage. Gmail, Outlook and Zoho tokens are stored in our Supabase database and used only to send (and, with ION, read) mail for you.
How we use your data
- Run the product: find and score leads, write draft emails, deliver them to you, and send the ones you approve.
- Bill you.
- Support you when you ask.
- Keep the service secure and working.
We do not sell your data. We do not use your data to train AI models.
Service providers
We use these companies to run Nocket. Each gets what it needs and nothing more.
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Database | Account data, lead data, tokens |
| Railway | App hosting | Data in transit during processing |
| Netlify | Website hosting | Standard web request data such as IP address |
| Anthropic (Claude API) | Lead scoring and email drafting | Lead data, and message content if you use ION |
| Apollo | Finding prospects | Your targeting criteria (and it provides lead data to us) |
| Hunter | Email verification | Prospect work email addresses |
| Stripe | Payments | Name, email, billing details |
| Sending mail from Gmail | Nothing beyond your own account | |
| Microsoft Corporation | Sending email from a client's connected Outlook or Microsoft 365 account | Only when the client connects Outlook |
| Zoho | Sending mail from Zoho Mail | Nothing beyond your own account |
| Google Fonts | Website fonts | Standard web request data such as IP address |
Cookies and storage
This website does not set advertising cookies and does not run third-party trackers. The Nocket app uses strictly necessary cookies to keep you signed in.
Data retention and deletion
We keep your data while your account is active.
To delete your account, email pietro@nocketai.com. We delete your account data, lead data, and tokens within 30 days. Billing records are kept longer where tax law requires it. We also keep a bare list of email addresses that asked not to be contacted, with nothing else attached, so they are never emailed again.
We keep opt-out lists after an account closes, so people who asked not to be emailed stay off our lists.
You can cut off Google access at any time from your Google Account under Security, then "Your connections to third-party apps and services". This revokes our tokens right away.
Security
Passwords are hashed. Data is encrypted in transit over HTTPS. Inbox tokens are encrypted at rest. Access to production systems is limited to the operator of Nocket. No system is perfect. If a breach affects your data, we will tell you.
Your rights
Depending on where you live, you may have the right to access, correct, export, or delete your data, and to object to some processing. Email pietro@nocketai.com and we will handle it. We will not charge you or treat you differently for using these rights.
Nocket does not sell or share personal information as those terms are defined under California law.
Children
Nocket is a business product. It is not for anyone under 18. We do not knowingly collect data from children.
Changes
If we change this policy in a material way, we will update the effective date above and email account holders. Using Nocket after that means you accept the change.
Contact
Nocket, 15805 Biscayne Blvd, Suite 311, North Miami Beach, FL 33160. pietro@nocketai.com