Privacy policy

Aftermarket Wholesale Academy 2.0 (the portal) is run by Aftermarket Wholesale Academy in the United Kingdom. This page says what we collect, why, and what we will never do with it. Questions to haychautomation@gmail.com.

What we collect

Your account details (name, email address, password stored as a hash). The business data you put into the portal yourself: your supplier tracker, orders, wins, business profile, posts, messages and screenshots you submit. Conversations you have with the portal's AI agents. A session cookie so you stay signed in. No advertising trackers, no analytics cookies.

Your Google email, if you connect it

The outreach desk can send supplier emails from your own Gmail address and read the replies. If you connect Google, we ask for two permissions: send email on your behalf, and read your mailbox. In practice the portal only reads replies on email threads the portal itself started; it never lists, searches or reads the rest of your mail. Your Google refresh token is stored encrypted (AES-256-GCM) and is never shown to anyone, including staff. You can disconnect at any time from the portal or from your Google account security settings, which cuts our access immediately.

The portal's use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell Google user data, do not use it for advertising, and do not use it to train general purpose AI models.

AI processing

The portal's agents run on Anthropic's Claude models. Content you give an agent to work on (including a supplier reply, if you use the outreach desk) is sent to Anthropic's API to produce the draft or analysis you asked for, under an agreement that does not permit training on your data. Drafted replies to your email are never sent without your approval.

Who else touches the data

Infrastructure only: Render (hosting and database), Cloudflare (video streaming), Google (the Gmail connection you chose to make), Anthropic (AI processing above). No data is sold or shared with advertisers, ever.

Retention and deletion

Your data stays while your account exists. Ask us to delete your account and we delete your data with it, including any stored Google token. Disconnecting Google deletes our standing access without touching the rest of your account.

Last updated 2 August 2026.