Privacy Policy

Last updated: July 3, 2026

1. Introduction

Two Hands Technology (“Company,” “we,” “us,” or “our”) operates the CM Relay service (the “Service”). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Service. We respect your privacy and are committed to protecting your personal data.

2. Information We Collect

Account Information: When you register, we collect your name, email address, organization name (if provided), and hashed password.

OAuth Tokens: When you connect an email mailbox (Microsoft 365 or Google Workspace), we receive and store OAuth 2.0 access and refresh tokens. These tokens are encrypted at rest using AES-256 and are only decrypted at the moment of use.

Email Relay Metadata: When the Service relays an email, we log the sender address, recipient address(es), subject line, timestamp, delivery status, source IP address, and device authentication method. We do not store the body content of relayed emails.

3. How We Use Your Information

4. What We Do Not Do

5. Data Security

6. Your Rights

You have the right to access, correct, delete, and export your personal data. To exercise any of these rights, contact us at help@twohandstech.com. We will respond within 30 days.

7. Contact Us

If you have questions about this Privacy Policy, contact us at help@twohandstech.com or call 858-242-4422.