← Goose Tools

Privacy Policy

Last updated: October 14, 2026.

Goose Tools ("we", "us") is a set of tools for creators: a link-in-bio page, carousel, caption and video tools, Crossposter (which crossposts your own videos to the social accounts you connect), analytics, a media kit, and Brand Manager and Brand Outreach, which help you answer and pitch brands from your Gmail. This policy explains what we collect and why.

What we collect

  • Account identity: your email address, name, and profile photo, via Google sign-in, to create and secure your Goose Tools account.
  • Connected-account credentials: OAuth access/refresh tokens (TikTok, YouTube, Instagram) and app passwords (Bluesky) that you explicitly grant. These are encrypted at rest (AES-256-GCM) and used only to publish content you initiate.
  • Content you submit: links and discount codes you add to your public page, videos you upload and the captions/hashtags you enter (temporarily stored to transcode and deliver them to your chosen platforms), and prompts/images you provide to generate carousels.
  • Gmail access (optional): if you connect Gmail for Brand Manager or Brand Outreach, OAuth tokens for the Gmail permissions described under "Gmail" below, encrypted at rest (AES-256-GCM).
  • Operational metadata: publish results (post URLs, status, errors) so you can see what happened.

How we use it

  • To provide the tools: render your public link page, generate your carousels, and publish your content to the platforms you select, when you ask us to.
  • To show you your connection health and post history.
  • To build your Media Kit: follower counts, audience breakdown (age, gender, location) and posting frequency from the accounts you connect, plus public YouTube subscriber counts for a handle you give us. These appear publicly only if you publish your kit, and your rate card only to people you send its private link.
  • To secure and operate the service. We do not sell your data or use your content to train models.

Gmail

Connecting Gmail is optional and separate from signing in. If you connect it, we ask Google for two permissions:

  • Read your email(gmail.readonly): to find your brand-deal and sponsorship emails, read those threads and the contracts attached to them, and learn how you write to brands from email you've sent, so replies sound like you.
  • Manage drafts and send email (gmail.compose): to save reply drafts in your Gmail for you to review, edit and send yourself, and to delete drafts when you ask it to. Brand Manager never sends email. The only email Goose Tools sends is a Brand Outreach pitch, and only when you press Send on it.

Where it's processed. The reading and drafting happen on your own computer, in the Goose Tools helper you install. Our server keeps your Gmail tokens encrypted and gives the helper a short-lived access token for each task. The helper uses the AI assistant you choose in Setup (Claude Code, Codex, Gemini CLI or OpenCode), signed in with your own account with that provider, so email it works on for you is processed by that provider under your account and its terms.

What our server keeps.We don't store copies of your emails. We keep the sender, subject and date of brand threads (to track which have drafts), the deal notes the helper writes, and the replies, drafts and pitches it writes for you, which can quote the email they answer, so you can see them on the site.

What we never do with it.We use Gmail data only to provide the features you use. We don't sell it, use it for advertising, or transfer it to anyone except as described here. We never use it to develop, improve or train AI or machine-learning models. No one at Goose Tools reads it unless you ask us to (for example, for support), it's needed for security, or the law requires it.

Third parties

We share data only with the platforms you connect (TikTok, YouTube/Google, Instagram/Meta, Bluesky) to fulfill your publish requests, and with infrastructure providers that run the service (hosting, database, email delivery, file storage) under their own terms. When a tool runs on your computer, it uses the AI assistant you connected, under your own account with that provider.

Retention & deletion

  • Uploaded videos are removed after processing.
  • You can disconnect any account at any time, which deletes its stored tokens; you can delete links from your public page at any time.
  • For Instagram automations we store the comments that matched your rules, the DMs sent on your behalf, and message threads with your audience — solely to run your automations and show you your own analytics and inbox. Disconnecting Instagram (from Goose Tools or from your Instagram app settings) deletes your stored token and disables your automations, and Meta's data-deletion request flow removes the associated Instagram data we hold.
  • Disconnecting Gmail in Setup deletes your stored Gmail tokens and the brand-thread list, and asks Google to revoke our access. You can also remove access at any time at myaccount.google.com/permissions.
  • Email collab@erinkerr.me to delete your account and all associated data.

Platform data

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. TikTok, Instagram, and Bluesky data is used solely to provide the features you request.

Contact

Goose Tools — collab@erinkerr.me — goosetools.com