climp by whichdrive.in
Zero Server Storage Architecture

Privacy Policy

Effective Date: October 25, 2026 • Last Updated: October 25, 2026

At Climp, a service operated by WhichDrive (accessible via whichdrive.in and climp.whichdrive.in), we value your privacy above all else. This Privacy Policy outlines our principles and practices concerning information collection, usage, and disclosure when you use our serverless email marketing workstation.

Our Privacy Commitment: 100% User-Owned Data

Climp does not operate a central customer database. All subscriber lists, campaigns, dispatch history, and email templates are stored exclusively in your personal Google Sheet or Google Drive. Our server never writes your business data to server disks or databases.

1 Information We Collect and Process

When utilizing Climp, the types of data involved in providing the service include:

  • WhichDrive Identity Credentials: User email, account ID, and session tokens verified via WhichDrive Single Sign-On (Supabase Auth) to authenticate your marketing workspace.
  • Google Account Information: When you connect via Google OAuth, we receive temporary authorization tokens and your Google email address to locate and manage your private "Climp Email Marketing Database" spreadsheet in your Google Drive.
  • Google Sheet Database Records: Your subscriber emails, contact lists, newsletter templates, and campaign dispatch logs. These records reside solely inside your Google Sheet.
  • Brevo API Key (Optional): Your personal Brevo API key used strictly to authenticate outbound campaign dispatches. It is retained in your local browser session and is never persisted on our server disks.
Google API Services User Data Policy Compliance

Climp's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We specifically request access to Google Drive and Google Sheets APIs (https://www.googleapis.com/auth/spreadsheets and https://www.googleapis.com/auth/drive.file) solely to read and write your email campaign database spreadsheet created by Climp.

❌ No AI / Machine Learning Training

Google user data is never used to develop, train, or improve generalized artificial intelligence or machine learning models.

❌ No Data Sale or Transfers

We do not sell, rent, or transfer any Google user data to data brokers, advertising networks, or third parties.

❌ No Advertising

Google user data is never used for serving advertisements, retargeting, or consumer profiling.

🔒 Complete User Ownership

Your Google Spreadsheet belongs 100% to your Google Drive account, fully accessible and controllable by you.

2 How We Use Your Information

The information accessed by Climp is strictly utilized to:

  • Authenticate your identity via WhichDrive Single Sign-On.
  • Connect directly to your private Google Sheet to read, append, update, and manage contacts, audience segments, campaigns, and dispatch logs.
  • Execute broadcast and test email dispatches via Brevo SMTP API using your credentials.
  • Render live responsive previews of your email marketing templates across mobile and desktop viewports.

3 Data Retention and Revocation

Because Climp does not store your audience data on our servers, data retention is entirely governed by your personal storage accounts:

  • Revoking Google Access: You can revoke Climp's Google Drive and Sheets permissions at any time by visiting Google Account Security Permissions.
  • Deleting Your Data: You have permanent, unilateral control to delete or export your Google Sheet directly inside Google Drive at any moment.
  • Disconnecting from Climp: Clicking "Disconnect" or "Log out" immediately purges all active session tokens from your client browser.

4 Third-Party Services

Climp integrates with trusted external platforms to provide functionality:

  • WhichDrive (whichdrive.in): Identity provider and authentication gateway.
  • Google Cloud & Google Workspace: Document storage and OAuth authorization for user-owned spreadsheets.
  • Brevo (formerly Sendinblue): Transactional and bulk email dispatch provider.

5 Security Measures

All network communication between your browser, our proxy routes, WhichDrive, Google APIs, and Brevo is encrypted using industry-standard Transport Layer Security (TLS 1.3 / HTTPS). Access tokens are held ephemerally in browser memory and scoped storage.

6 Contact Us

If you have questions, feedback, or inquiries regarding this Privacy Policy or data practices, please contact us:

WhichDrive Operations

Website: https://whichdrive.in

Email: support@whichdrive.in

Product: Climp Email Marketing Workstation