TWL Tool

Privacy Policy

Last updated: 8 October 2026

This policy explains how TWL Tool processes information when you use the TWL Tool website, account services, and Chrome extension (together, the “Service”).

TWL Tool is provided by Webmania Services Limited (company number 13674389), of 58 Lauderdale Crescent, Manchester, M13 9DP, United Kingdom. Webmania Services Limited is the controller for account, website, support, security, and billing information. When a customer places prospect, campaign, or other customer data in TWL Tool, the customer is normally the controller and we process that data on the customer's instructions.

Information the Service processes

TWL Tool only processes page content and browser context when needed to provide a feature you request or configure. It does not sell personal information or use extension data for personalised advertising.

How information is used

Product analytics

We use PostHog to understand which pages and features are used in the authenticated app. We send a pseudonymous TWL user identifier, workspace identifier, page path, and product-usage events. We do not send URL query strings, session recordings, form contents, or customer workspace content through this analytics integration.

Google user data

If you connect Gmail, TWL Tool requests permission to send email you authorise through an outreach workflow and to read Gmail messages and threads so it can show conversation context, identify replies, and stop scheduled follow-ups after a recipient responds. TWL Tool does not use Gmail access to serve advertising, build advertising profiles, or sell Google user data.

TWL Tool requests the gmail.send scope to send messages and replies that you approve or configure, and the gmail.readonly scope to find relevant threads and replies. It does not request permission to delete messages, change mailbox settings, or operate an independent copy of your Gmail mailbox. Google user data is used only to provide and maintain the Gmail features you enable.

TWL Tool's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Gmail recipients and opt-outs

Gmail sending respects recipient opt-outs, withdrawals and workspace privacy suppressions. Workspace users are responsible for obtaining any permissions required for their messages. TWL does not require a separate manual recipient-consent form before sending. Existing withdrawals continue to block future sends; they do not recall messages already sent.

Google data and optional AI processing

Email AI drafting is optional and requires a separate permission in the campaign's conversation settings. When enabled, relevant message bodies and conversation context are sent to the approved AI service to assess the conversation and prepare a reply. This feature remains unavailable until the provider's no-training and data-handling settings have been reviewed. Turning off Allow AI to read email conversations for the campaign stops this processing for every lead, including cached draft retrieval and automatic AI replies.

We do not use or retain Google user data to develop, improve, or train general-purpose or non-personalised AI or machine-learning models. Providers processing Google data on our behalf must follow the same restrictions. Google data is not used for advertising or unrelated profiling. These restrictions take precedence over general references to improving the Service in this policy or our terms. We also adhere to the Google Workspace user data and developer policy.

Google data service providers and human access

Access to Google user data is limited to authorised service components and infrastructure, hosting, security, monitoring, and support providers acting on our instructions and bound by appropriate confidentiality and data-protection obligations. We do not transfer Google user data to advertising platforms, data brokers, or credit agencies.

People do not read Gmail content except when you expressly ask us to investigate or support a feature, when access is necessary to address abuse or a security incident, when required by law, or for internal operations where the data has first been aggregated and anonymised where appropriate.

Google data retention and deletion

OAuth connection credentials are kept only while needed to maintain the Gmail integration. Disconnecting Gmail in Settings → Integrations stops new API access and removes or disables the stored connection credentials. You can also revoke TWL Tool from your Google Account connections, which invalidates its access.

TWL Tool does not retain Gmail content as a separate mailbox archive. Saved conversation records can include full reply bodies, outbound messages, AI drafts, sender and recipient addresses, subjects, timestamps, message and thread identifiers, delivery or reply status, campaign records, and audit information. Disconnecting Gmail stops new access but does not by itself erase records already saved in your TWL workspace. These records may remain until you delete them, close the account, or ask us to delete them, subject to limited legal, fraud-prevention, security, backup, and dispute-resolution retention. To request deletion of Google-derived data or an account, email privacy@usetwl.com.

Campaign contact erasure and anonymisation remove the associated outreach email messages, linked conversation copies and AI drafts, and email action snapshots. Hashed suppression records can be retained to prevent re-contact. Independently saved inboxes, table records, exports, and backups have their own retention and deletion lifecycle; include these when requesting deletion. We do not promise that disconnecting a mailbox deletes these copies.

Chrome extension permissions

The extension requests permissions such as storage, active tab, scripting, tabs, identity, notifications, cookies, web requests, native messaging, offscreen documents, and access to supported websites. These permissions enable sign-in, user-triggered capture, dynamic browser capabilities, synchronisation, notifications, and integration with the TWL Tool service. The extension does not use these permissions to monitor unrelated browsing for advertising.

Sharing and service providers

Information may be processed by infrastructure, hosting, authentication, monitoring, product-analytics (including PostHog), and support providers acting on our instructions. We may also disclose information when required by law, to protect users or the Service, or as part of a business transfer subject to appropriate safeguards. We do not sell extension data or transfer it to data brokers, advertising platforms, or credit agencies.

Retention and security

Information is retained only for as long as needed to provide the Service, meet legal obligations, resolve disputes, and maintain security. We use technical and organisational safeguards designed to protect information, although no system can guarantee absolute security.

Your choices and rights

You can remove the extension, stop using a browser capability, or request access, correction, export, or deletion of account information. Legal rights may vary by location. To make a request, contact us using the address below.

Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information.

Changes to this policy

We may update this policy as the Service changes. The date at the top will show the latest revision, and material changes will be communicated where required.