Privacy Policy

Envoy is part of Naamy, a software hub built and operated by HH Metta Sdn. Bhd. (“we”, “our”, “us”). Naamy houses several software products; Envoy is one of them. This policy describes what personal data we collect when you use Envoy at envoy.naamy.co and how we handle it.

When you sign up for and use Envoy, we collect:

• Account data: your email address, sign-in method (magic link or Google OAuth), and signup date.
• Product data: the name, URL, description, target audience, and keywords you enter during onboarding so Envoy can find relevant conversations for you.
• Monitoring preferences: the list of subreddits you choose to monitor.
• Discovered content: publicly available Reddit posts that match your monitoring configuration, along with AI-generated relevance scores and draft replies.
• Billing data: if you upgrade to Pro, your Stripe customer and subscription IDs. We do not store credit card numbers; all payment details are handled directly by Stripe.
• Operational logs: scan history and error messages for debugging.

• To run the scanning pipeline on your behalf and deliver your daily digest email.
• To score relevance and draft replies using Anthropic's Claude API, which processes post text to produce scores and reply suggestions.
• To send you transactional email (welcome, daily digest, trial-expiring notices) via Loops.so.
• To process subscription payments via Stripe.
• To enforce plan limits and detect abuse.

We do not sell your data, show you ads, or use your product description to train AI models.

Envoy relies on these sub-processors to operate:

• Supabase — database, authentication, and file storage.
• Vercel — hosting, serverless functions, and logs.
• Anthropic — Claude API for relevance scoring and reply drafting. Per Anthropic's API terms, your data is not used to train their models.
• Apify — Reddit scraping infrastructure.
• Stripe — subscription billing and payment processing.
• Loops.so — transactional email delivery.

Envoy scrapes publicly available Reddit posts that match your monitoring configuration. We do not scrape private content, messages, or profiles. The scraped posts are stored temporarily in our database so we can de-duplicate, score relevance, and show them to you in the dashboard. Reddit remains the source of truth; we link back to the original thread on every display.

• Account and product data: retained as long as your account is active, and deleted within 30 days of account deletion.
• Discovered threads: retained for as long as your account is active to power your dashboard and prevent re-scoring the same content.
• Scan logs: retained for 90 days for debugging, then deleted.
• Billing records: retained per Stripe's data retention policies, typically 7 years for accounting purposes.

You can request a copy of your data, correct inaccuracies, or delete your account entirely by emailing us at the address below. Deleting your account removes your products, monitored sources, discovered threads, and draft replies. Stripe may retain billing records as required by law.

We use industry-standard encryption (HTTPS in transit, at-rest encryption via Supabase and Vercel's storage providers) and access controls. We follow the principle of least privilege for our team members who need access to operate the service.

We may update this policy from time to time. We'll notify active users by email before any material changes take effect. The “last updated” date at the top of this page always reflects the current version.

Questions or requests? Email us at hello@naamy.co.