Security

What we do with your access

Autone sends email from your inbox and reads orders from your store. Here is exactly what that means, in the words of the permissions we ask for.

Gmail and Microsoft 365

We ask for two Google permissions: send email on your behalf (gmail.send) and see your email address. That is the complete list.
If you connect a Microsoft 365 mailbox instead, we ask for the equivalent two Microsoft permissions: Mail.Send and User.Read (your name and email address). Tokens are stored the same way as Google's.
We cannot read your inbox. We never ask for a read permission on either provider, so the engine sees nothing you receive.
Creators reply to a reply-to address on our domain (outreach.autone.app). That is how the engine sees their replies without touching your mailbox.
Every email the engine writes is sent as you, in your voice. How much it sends without asking is set by the autonomy level on your account: at the default level every first message to a creator waits for your approval, and once you have approved contacting a creator the engine may continue that conversation on its own (replies and follow-ups that offer no fee and pass its copy checks); at the levels you can switch on, strong-match gifted first outreach also goes out on its own. Every sent message is recorded in that creator's conversation history. Creator payments always need your explicit approval.
Your Google or Microsoft tokens are encrypted at rest with AES-256-GCM. The key lives only in our server environment and is never written to logs.
Disconnect the mailbox in Settings at any time, or revoke Autone in your Google or Microsoft account. Either one stops sending immediately.

Shopify

We ask for four scopes: read orders, read products, write discount codes and write draft orders. Orders are read to trace sales back to a creator. Products are read so the engine knows what you sell. Discount codes are created per creator so their sales can be attributed. Draft orders are used to ship gifted product.
We never change your theme, your prices, your customers or your settings.
Your Shopify access token is encrypted at rest the same way.
We honour Shopify's data-request, data-erasure and shop-erasure webhooks. Uninstalling the app or disconnecting the store stops all reads.

Payments

If you installed the Shopify app, your subscription is billed by Shopify and appears on your Shopify invoice. Otherwise it is billed by Stripe. Card and bank details go to Shopify's or Stripe's hosted pages and never reach our servers.
Creator payments you approve are separate from the subscription: they are funded through Stripe and paid to the creator by Stripe or PayPal.
A payment to a creator is never sent without your explicit approval, at every plan and every autonomy level.

Where your data lives

The application runs on Vercel and Fly.io. The database is Supabase (Postgres).
Email address, creator conversations, shipments and attributed orders are stored for as long as your account exists.
To delete everything, email support@autone.app from the account address. Deletion is done within 30 days and confirmed by reply.

Questions about any of this go to the founder directly: contact.

Gmail and Microsoft 365

We ask for two Google permissions: send email on your behalf (gmail.send) and see your email address. That is the complete list.

If you connect a Microsoft 365 mailbox instead, we ask for the equivalent two Microsoft permissions: Mail.Send and User.Read (your name and email address). Tokens are stored the same way as Google's.

We cannot read your inbox. We never ask for a read permission on either provider, so the engine sees nothing you receive.

Creators reply to a reply-to address on our domain (outreach.autone.app). That is how the engine sees their replies without touching your mailbox.

Every email the engine writes is sent as you, in your voice. How much it sends without asking is set by the autonomy level on your account: at the default level every first message to a creator waits for your approval, and once you have approved contacting a creator the engine may continue that conversation on its own (replies and follow-ups that offer no fee and pass its copy checks); at the levels you can switch on, strong-match gifted first outreach also goes out on its own. Every sent message is recorded in that creator's conversation history. Creator payments always need your explicit approval.

Your Google or Microsoft tokens are encrypted at rest with AES-256-GCM. The key lives only in our server environment and is never written to logs.

Disconnect the mailbox in Settings at any time, or revoke Autone in your Google or Microsoft account. Either one stops sending immediately.

Shopify

We ask for four scopes: read orders, read products, write discount codes and write draft orders. Orders are read to trace sales back to a creator. Products are read so the engine knows what you sell. Discount codes are created per creator so their sales can be attributed. Draft orders are used to ship gifted product.

We never change your theme, your prices, your customers or your settings.

Your Shopify access token is encrypted at rest the same way.

We honour Shopify's data-request, data-erasure and shop-erasure webhooks. Uninstalling the app or disconnecting the store stops all reads.

Payments

If you installed the Shopify app, your subscription is billed by Shopify and appears on your Shopify invoice. Otherwise it is billed by Stripe. Card and bank details go to Shopify's or Stripe's hosted pages and never reach our servers.

Creator payments you approve are separate from the subscription: they are funded through Stripe and paid to the creator by Stripe or PayPal.

A payment to a creator is never sent without your explicit approval, at every plan and every autonomy level.

Where your data lives

The application runs on Vercel and Fly.io. The database is Supabase (Postgres).

Email address, creator conversations, shipments and attributed orders are stored for as long as your account exists.

To delete everything, email support@autone.app from the account address. Deletion is done within 30 days and confirmed by reply.

Questions about any of this go to the founder directly: contact.