Privacy Policy

The short version

• Your data is never sold, never used for advertising, and never used to train general AI models.
• Wren never sends an email without you tapping Send, and never permanently deletes your email.
• You can disconnect an inbox anytime, and you can ask us to delete your account and data.

What we collect

• Account details: your name, email address, password (stored only as a secure hash) or Google sign-in, time zone, and the role you pick (creator or manager/agency).
• Your workspace: the deals, deliverables, contacts, notes, contracts, invoices, outreach lists and settings you create or upload.
• Connected email data: if you connect an inbox, the email messages and metadata Wren needs to show your mail, find brand deals and check senders. See Email data and How Wren uses your Google data.
• Billing details: your plan and billing history. Card details are collected and stored by Stripe, not by Wren.
• Payout and business details: what you choose to show on invoices, like your business name, address, logo and payment instructions.
• Technical data: basic logs such as IP address, browser type and the time of requests, used to keep Wren secure and working.

How we use it

We use your data only to provide and improve the features you use in Wren:

• showing your inbox, finding brand deals and filling in deal details;
• tracking deals, deliverables, contacts and money owed;
• reviewing contracts, checking senders for scams, and drafting replies and pitches for you to review;
• creating, sending and tracking invoices, and taking payments through Stripe;
• sending you account emails like sign-in codes, receipts and reminders you've turned on;
• keeping Wren secure, preventing abuse and fixing problems.

Email data

When you connect Gmail, Outlook or another inbox, Wren reads your messages so it can show them in Wren, sort out brand deals, and run Deal Investigation checks. Wren only sends, archives, labels or moves email when you take that action in Wren. Archive and delete work like your mail app's Trash, so Wren never permanently deletes your email.

Your email data is never sold, never used for advertising, and never used to train general AI models. People at Wren don't read your email, unless you ask us to for support, it's needed for security or abuse investigations, or the law requires it.

AI processing

Some features use AI to help you: finding brand deals in email, contract reviews, negotiation drafts, scam explanations and outreach pitches. To do this, the relevant text (for example an email or a contract) is sent to our AI provider, Anthropic (Claude), which processes it on our behalf to return a result. It isn't used to train their general models. AI output is guidance only. You review everything before it is sent or saved.

Sharing and processors

We never sell your data. We share it only with service providers who help us run Wren, under contracts that limit how they use it:

• Supabase: database hosting where your Wren data is stored.
• Stripe: subscription billing, card payments on invoices, and payouts.
• Resend: delivery of account emails such as sign-in codes, invites and invoice emails.
• Anthropic (Claude): the AI provider for the features described above.
• Emergent: application hosting and file storage (for example contract files and invoice logos).
• Google and Microsoft: only when you connect their accounts, to read and send your mail as described above.

We may also share data if the law requires it, to protect Wren's users or rights, or as part of a merger or sale, in which case we'll tell you first.

Agencies and managers: if you approve a manager or agency, they can work in your Wren workspace. You can remove their access anytime.

Community Scam Shield: when you report a sender as a scam, we store the sender's address and domain to warn other creators. Your own identity and your email content are not shown to other creators.

Retention and deletion

• We keep your data while your account is open.
• When you disconnect an inbox, Wren removes that inbox's synced email from Wren. Emails linked to your deals stay with the deal unless you delete them.
• You can ask us to delete your account at hello@wrencreators.com. We delete your account data within 30 days, except records we must keep for legal, tax or fraud-prevention reasons (like invoices and payment records).
• Backups are overwritten on a regular schedule.

Security

Data is encrypted in transit (HTTPS) and at rest by our hosting providers. Email connection tokens are stored securely and used only to sync and send your mail. Wren connects to Google and Microsoft through their official sign-in, so we never see those passwords. No system is perfectly secure, but we work hard to protect your data and will tell you promptly if a breach affects you.

Your rights

You can access, correct, export or delete your data, and object to or limit how we use it. Depending on where you live (for example under GDPR or CCPA), you may have more rights, including complaining to your local data protection authority. Email hello@wrencreators.com and we'll respond within 30 days.

Children

Wren is not for children. You must be at least 13 years old to use Wren, and if you're under the age of majority where you live, you need a parent or guardian's permission. We don't knowingly collect data from children under 13. If you think a child has given us data, contact us and we'll delete it.

Changes to this policy

If we make important changes, we'll update the date at the top and tell you by email or in Wren before they take effect.

Contact

Questions or requests: hello@wrencreators.com.