What never touches our servers
- Your inbox. Cachet Inbox never reads, syncs, or stores your mailbox. The panel you see in Gmail runs in your browser and shows tracking and relationship data for the thread you have open.
- Your outgoing mail, when it sends. Mail-merge sends go from your browser straight to Gmail's own API, signed in as you. Your messages are never routed through or relayed by our servers.
- Your Google password. Sending uses Google's own sign-in. We never see your credentials.
What we store, and why
Tracking and a relationship layer cannot work with zero data. Here is the full list of what the backend keeps:
- Per-send tracking records: recipient address, subject line, and send time for messages you choose to track. This is what your reply, click, and open reports are built from.
- Send events: replies and clicks, plus opens with the timestamp, network address, and browser signature needed to classify Apple's prefetcher, bots, and your own re-reads as not-real.
- Your pipelines and deal boxes: the stages, deal titles, contacts, and fields you enter.
- Notes and commitments: the free-text notes and next-step commitments you attach to a contact or deal.
- Reminders you set: the thread reference, contact, subject, and due date, kept so a follow-up can surface or cancel itself when the contact replies.
- Saved templates and campaigns: the named subject and body templates you save, so multi-day sends resume across restarts.
- The unsubscribe list: addresses of people who opt out, kept so they are skipped on every future send.
- Your plan: which plan you are on and its billing status. Payment card details are never stored by us; they are held by the payment processor.
- Your custom tracking domain (Pro): the hostname you connect so tracking links carry your own domain.
Recipients are protected too
- Every merged send carries a one-click unsubscribe. Opting out is honored on the current send and all future ones.
- Your own opens are suppressed, so re-reading your sent mail never inflates the numbers you act on.
- Opens are classified honestly (real, prefetch, bot, suspicious) and demoted to a labeled secondary hint, never reported as fake certainty. Pixel tracking is off by default.
Your data hygiene is a promise
- Contacts are never merged without asking. Every change keeps a full undo and an audit trail.
- You can export or delete what we hold at any time.
Questions
This page reflects the product as built today. If anything here is unclear, ask: honesty complaints are the ones we fix first.