Frank privacy
Effective date: November 7, 2026.
Frank is a Wild Built Studio tool. Contact admin@crespohq.com about access, privacy, or deletion of your Frank records.
Information we use
We use your Google identity and email address to bind your connection to your approved Frank account. With your authorization, Frank reads recent Gmail message headers, dates, sender information, snippets, bounded plain text, labels, thread identifiers, and attachment names. It does not retrieve attachment contents. Your manual corrections, reply previews, action approvals, and results are used to provide the review and the actions you request.
Reading happens when you request a refresh or a single-message import. The current review covers messages from the last 14 days and reads at most 20 message contents in a sync batch. Continuing a partial sync requires another action. Text is limited to 4 KB per retained message. Mailbox data is not shared with other invited users.
Permissions and your choices
The Google connection requests identity, email address, Gmail reading, and permission to manage drafts and send email. Permission does not authorize unattended sending: Frank requires you to review and approve the exact reply. Optional archiving asks for Gmail management permission separately and requires approval for each archive. Frank does not permanently delete Gmail messages or empty Gmail trash.
Storage and service providers
Google provides Gmail and authorization. Cloudflare provides Frank’s protected hosting, sign-in boundary and storage. Connection tokens are encrypted before storage. Frank uses retained mailbox data to display and organize your review and to perform actions you approve. AI is disabled in this pilot; mailbox text is not sent to a model service by the current configuration.
Retained message text, headers and reply previews expire within the existing 14-day review window. Content-free reply and archive action receipts and removal references may remain for up to 30 days. Removal references contain identifiers, times, status and review flags rather than retained message text. A removal reference is not a backup of the full email. Account membership and approved access settings remain until access is withdrawn or deletion is requested. Session and authorization-flow records expire automatically. Draft approval expires after five minutes; encrypted draft content and recipient details are removed by the next scheduled daily cleanup. Content-free draft status and duplicate-prevention records—including identifiers, hashes, timestamps and preparation counts—have no automatic expiry. You may request deletion using the contact below.
When the Frank connection to Paulina is enabled, Paulina can show a general reminder that an email needs your review, with a link back to Frank. The reminder does not include the email’s subject, sender, body or attachments. Paulina stores an opaque reference, language, reminder status and timestamps. These reminder records expire 90 days after creation, completion or dismissal; a later dismissal starts a new 90-day period. Expired records stop appearing and are removed by scheduled cleanup. Completion and dismissal references prevent delayed deliveries from reopening a reminder. Dismissing a reminder does not send, archive or delete the original email.
Daily removal checks inspect Frank’s local records. They do not read additional Gmail content, make Gmail changes, or certify that an email can safely be deleted. When a reference expires, Gmail itself is unchanged.
Limited use
Google user data is used only to provide and improve the user-facing Frank features you request. It is not sold, used for advertising, or used to train a generalized AI model. Any future feature that changes these uses requires updated disclosure and applicable authorization. Frank’s use and transfer of Google API information must follow the Google API Services User Data Policy, including its Limited Use requirements.
Disconnecting and deletion
Disconnect removes Frank’s stored Gmail access first and then asks Google to revoke authorization. Frank displays whether that request succeeded; if it fails, you can remove the connection in your Google Account. Disconnecting does not undo an email already sent or an archive already performed, and it does not automatically erase existing retained review records before their retention deadline.
You can request deletion of your Frank records at admin@crespohq.com. We will verify that the request concerns your account before changing private records. This request does not delete your original Gmail messages. Do not email us your password or access tokens.
Michael
Go be wild.