Data and account safety

• Every message goes out from your own Gmail. Endothermis never sends from its own domain, never uses burner inboxes, and never adds tracking pixels or link shorteners. Plain text only.
• New-person emails default to 20 a day, ramping from 5 a day in your first week. Follow-ups and replies do not count. The ceiling is 40 and cannot be raised.
• Sends go out between 8am and 5pm in your time zone, weekdays, with random gaps.
• One person is contacted once per 90 days across all your campaigns. A company is capped at 3 people per trigger and 6 per quarter.
• A bounce rate above 3 percent in a week pauses the campaign until the contact source is re-verified.
• Across users, Endothermis spreads sends so one recruiter does not get several near-identical notes from the same school in one morning.

• Grounding. Any claim about the person or company that is not in the research bundle is rejected.
• Voice. Drafts are scored against your own sample emails and rejected if they read like a template.
• Dedup. A message over 70 percent similar to one any user sent the same person in 30 days is rejected.
• Links. Every URL must resolve.

Then your approval, when approval is on. The default is approval on every message until you have approved ten.

• Encrypted in transit and at rest. Each user’s rows are isolated with row-level security.
• Gmail refresh tokens live in a server-only table that no browser session can read.
• We request the narrowest Google scopes that make the product work: send mail, read the threads Endothermis started, read calendar free/busy.
• Your resume, voice samples and threads are never shown to another user. We do not train models on them; free AI providers may (see the Privacy Policy). Your Gmail goes only to Claude.
• Delete your account in Settings; everything tied to it is removed.

Every send is logged with its trigger and gate scores, so if anything ever goes wrong with your account it can be traced to a cause.

Email [email protected]. If you believe a message went out that should not have, say so and we will investigate the log.