Privacy Policy

Last updated: July 3, 2026

Stealth IQ ("we", "our", or "us"), operated by Eduardo Faroni doing business as Guarana Lab, provides a lead intelligence platform that integrates with third-party services to help businesses identify and prioritize sales leads. This Privacy Policy explains how we collect, use, store, and protect your information.

Information We Collect

When you use Stealth IQ, we may collect the following information:

Information You Provide Directly: Your name and email at sign-up, organization details, support correspondence, and settings you create such as follow-up sequences and message-style preferences.
Account & Authentication Data: Account, sign-in, and organization data managed on our behalf by our authentication provider, Clerk, including which integrations you have connected.
Google Account Information: When you sign in with Google, we receive your name, email address, and profile picture from your Google account.
Google Gmail Data: With your explicit consent, we access Gmail data including email subject lines, email body content, and email metadata (sender, recipient, timestamps). This data is used for the features described in "How Google Data Is Used" below: lead enrichment and scoring, generating and personalizing follow-up messages, and detecting replies from your leads. When you enable email sending, we also use the Gmail API to send follow-up emails that you compose, approve, or schedule— from your email address, on your behalf. We never send email without an action you initiated.
Microsoft Outlook Data: With your explicit consent, we access Outlook email messages and metadata (sender, recipient, timestamps)—and, when enabled, send approved follow-up emails on your behalf—for the same purposes described above.
GoHighLevel CRM Data: Contacts, opportunities, conversations, pipeline data, and the content of messages—including SMS and email—exchanged through your connected GoHighLevel account.
Fireflies Data: If you connect Fireflies, we access your meeting transcripts, summaries, and participant information to enrich lead scoring.
Usage Data: Basic usage information such as pages visited and features used within Stealth IQ.

How We Use Your Information

To authenticate your identity and provide access to the platform
To fetch and analyze CRM, email, and transcript data for lead scoring and categorization
To enrich conversation data with email content for more accurate lead intelligence
To generate AI-powered insights, follow-up messages, and action plans for your leads
To process payments and manage your subscription
To improve and maintain the functionality of our service

What We Store vs. Process Temporarily

We store the records needed to run the platform: contacts, opportunities, conversation and message records (the 25 most recent messages per conversation), meeting transcripts, synced email metadata and short snippets, AI lead scores and reasoning, your follow-up sequences and message-style settings, and your integration credentials (encrypted).

We process temporarily and do not retain the prompts and responses exchanged with AI providers during scoring (these are not logged), the raw responses from third-party APIs before they are transformed into the records above, and intermediate data created while handling your request.

Data Retention

CRM contacts, pipelines, users, and tags are refreshed on roughly a 7-day cycle—older copies are purged and re-fetched from the source.
Conversations and messages are retained for about 30 days from their last sync; we keep the 25 most recent messages per conversation.
Fireflies transcripts are refreshed on roughly a 30-day cycle.
AI lead scores are recomputed roughly every 30 days; cached AI responses expire after about one to two days.
Synced Gmail and Outlook email records are retained until you disconnect that provider from within Stealth IQ (which deletes them—see below) or delete your account.
Files you attach to follow-up messages are retained until you request their deletion.
Encrypted integration credentials are retained until you disconnect the integration or delete your account.

When you delete your account (see Data & Security), the data associated with your organization—imported contacts, CRM data, meeting transcripts, synced emails, AI scores, and follow-up sequences—is permanently deleted from our systems within 24 hours. We retain minimal records of messages sent through Stealth IQ (recipient, subject, a snapshot of the message, and timestamp) and non-content usage metrics, for audit and billing integrity.

Google API Services User Data Policy

Stealth IQ's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

What Google Data We Access

We access Gmail data (email subject lines, body content, and metadata such as sender, recipient, and timestamps) for emails between you and your leads. When you enable email sending, we also use the Gmail API to send email from your address on your behalf—only messages you compose, approve, or schedule.

How Google Data Is Used

Google user data is used only to provide user-facing features of Stealth IQ: lead enrichment and conversation scoring; generating and personalizing follow-up messages (including learning your writing style from your own sent mail); detecting replies from your leads so automated sequences stop, with the reply shown in your sequence history; and sending follow-up emails you approve, when you enable sending.
To provide these features, limited Gmail content (subject lines and short message snippets) is processed at inference time by the AI providers listed below, under agreements that prohibit them from training on your data.
Google user data is not used for advertising, and is not shared with or sold to third parties for advertising purposes.
Google user data is never used to train or improve any AI or machine-learning models—ours or our providers'.

Revoking Access & Data Deletion

Disconnecting Google from within Stealth IQ (Dashboard → Setup → Email Connection) revokes our access with Google directly and permanently deletes the emails we synced from your account. Disconnecting Microsoft deletes your synced Outlook emails the same way. You can also revoke Stealth IQ's access at any time from your Google Account Permissions page. To request deletion of any other Google data we have stored, please contact us at the email below.

Subprocessors & Third-Party Services

We share data with the following categories of vendors (subprocessors) only as needed to operate the Service. Each has its own privacy policy, and we encourage you to review them:

GoHighLevel — source CRM data (contacts, opportunities, conversations, messages)
Google — sign-in and Gmail data access; Google Cloud for email notifications
Microsoft — Outlook email data access
Fireflies — meeting transcript data
Clerk — user authentication, organization management, and custody of Google/Microsoft OAuth tokens
Stripe — subscription billing and payment processing
Vercel — frontend application hosting
Render — backend application hosting
Neon — database (PostgreSQL) hosting
Upstash / Redis — caching of computed results
Cloudflare R2 — storage of follow-up email attachments
Resend — fallback delivery of transactional and notification emails
AI providers — lead scoring and conversation analysis: OpenAI, Google (Gemini), xAI (Grok), Groq, and Mistral (see "AI Subprocessors & Model Training" below).

AI Subprocessors & Model Training

We do not use your data to train our own models. Stealth IQ uses third-party large language model providers (currently OpenAI, Google, xAI, Groq, and Mistral) to process conversation content via their business/API services. Under our agreements with these providers:

Your data is never used to train their models.
Inputs and outputs are retained only transiently—typically up to 30 days (55 days for Google) solely for abuse monitoring and security purposes—after which they are permanently deleted.
Data is processed under each provider's data processing agreement.

We do not use consumer-tier AI services, and we periodically review each provider's data handling terms.

Cookies & Analytics

We use essential cookies required for authentication and session management, provided through our authentication vendor (Clerk). We do not use advertising cookies, and we do not currently use third-party analytics or tracking cookies.

Data Storage & Security

Your data is stored on secure cloud infrastructure. We use industry-standard encryption for data in transit (TLS/HTTPS); our databases and object storage are encrypted at rest at the infrastructure layer; and integration credentials, API keys, and OAuth tokens are additionally encrypted at rest at the application layer. Access to production data is restricted to authorized personnel on a need-to-know basis. For more detail, and for instructions on disconnecting integrations and deleting your data, see our Data & Security page.

Third-Party Services

Each third-party service listed above has its own privacy policy governing its handling of data. We encourage you to review their policies as well.

Your Rights

You have the right to:

Request access to the personal data we hold about you
Request correction or deletion of your personal data
Revoke access to connected third-party accounts at any time
Request a copy of your data in a portable format

To exercise any of these rights, or to delete imported data or your account, see the Data & Security page or email us at the address below.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by updating the "Last updated" date at the top of this page. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at: efaroni@guaranalab.com