Legal

Privacy Policy

Last updated: October 13, 2026

Westerly ("Westerly," "we," "our," or "us") is a client-acquisition and content platform for independent professionals and small teams, operated by AI West LLC. This policy explains what information Westerly collects, how we use it, how we protect it, and the choices you have, including specific detail on data we access through your connected Google (YouTube) and LinkedIn accounts, since that is often the most sensitive data you share with us.

This policy covers the Westerly product at app.westerly.app and the marketing site at westerly.app. It does not cover other, unrelated products operated by AI West LLC.

1. Information We Collect

Account & business information

When you sign up, we collect your email address, a securely hashed password (via Supabase Auth), and your business/brand details entered during onboarding: your niche, target customer, offer, brand colors and font choice, and a recorded voice interview and headshots used to build your personal "Voice Card," the profile Westerly's AI uses to draft content and outreach that sounds like you.

Google account data (YouTube)

If you connect a Google account to enable the YouTube publishing feature, we request access to a narrow, specific set of permissions and access only the following:

  • Your channel identity: your YouTube channel ID and channel name, so we can show you which account is connected.
  • Videos you ask us to upload: when you finish editing a recording inside Westerly and choose to publish it, we upload that video file, its title, description, and your chosen thumbnail to your YouTube channel on your behalf. Nothing is uploaded to YouTube without you taking that action.
  • Your published videos' metadata and performance: titles, descriptions, publish dates, and aggregate statistics (view count, like count, comment count, average view duration, average view percentage, and click-through-rate where available) for videos on your connected channel, so we can display your own video performance back to you inside Westerly.

We do not access your Gmail, Google Drive, Google Contacts, private messages, or any other Google product. We do not access YouTube videos, comments, or channels that aren't yours.

A small, aggregate slice of this data (a video's title together with its view count and click-through rate) may be included as context when Westerly's AI (see "AI processing," below) generates coaching suggestions about what to record next. Anthropic does not use API inputs to train its models, and this data is never used to build advertising profiles or shared with any ad network.

Google API Services User Data Policy:Westerly's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

LinkedIn account data

Westerly connects to LinkedIn through Unipile, a third-party connection provider. We never see or store your LinkedIn password. Through that connection we access your connections and conversation threads to research prospects, draft outreach messages for your review, and send the messages you approve. We do not post to LinkedIn on your behalf without your review, except for content you have explicitly scheduled to auto-publish.

Call recordings & video library (optional)

If you connect Fathom, we receive the transcript, summary, and attendee emails of calls you record, so we can match a completed call to the right lead and update your pipeline automatically. If you connect Tella, we access your Tella video library so you can pull an existing recording into Westerly instead of uploading it again. Both are optional and only apply if you connect them.

Content you create

Recordings you upload, drafts Westerly generates, thumbnails, and any other content you produce or approve inside the product.

Payment information

Billing is handled by Stripe. Westerly stores your subscription status and plan, but never your full card number; Stripe handles that directly.

Usage data

We collect basic product-usage analytics (pages viewed, features used) via PostHog to understand what's working and fix what isn't.

How you found us

When you visit westerly.app we set a first-party cookie, valid for 90 days, that remembers where you came from (a campaign tag on a link, the name of the site that sent you, and the page you landed on) and a random visitor ID. If you later create an account we store that source on your account, so we can tell which of our posts and pages led to a signup. It holds no name, email address or other personal details. We do not set it, and we do not send it to our servers, if your browser sends Do Not Track or Global Privacy Control. We also use Google Analytics on westerly.app and on the sign-up and pricing pages, and when you sign up we ask how you heard about us (optional).

2. How We Use Your Information

  • To operate the product: generate your weekly content brief, draft outreach and content in your voice, and publish what you approve to LinkedIn, YouTube, and email.
  • To sync and display your own LinkedIn and YouTube performance data back to you.
  • To process payments and manage your subscription.
  • To provide customer support and respond to your requests.
  • To send account-related and, where you haven't opted out, product email.
  • To maintain security, prevent abuse, and comply with legal obligations.

AI processing

Westerly uses Anthropic's Claude API to draft outreach messages, content, and coaching recommendations from your Voice Card, your business context, and (where connected) the aggregate LinkedIn/YouTube performance data described above. Outreach messages you send and content you publish are reviewed and approved by you before they go out. Westerly does not send outreach or publish content without your approval, except for content you have explicitly scheduled.

3. How We Store & Protect Your Data

Data is stored in Supabase (PostgreSQL), hosted in the United States, with row-level security enforcing that one customer's data is never visible to another. OAuth credentials for connected accounts (including your Google refresh token) are encrypted at rest with AES-256-GCM before storage, and Westerly staff cannot read them directly from the database. Files (recordings, thumbnails) are stored in Cloudflare R2. We use Sentry for error monitoring. Access to production data is restricted to the personnel who need it to operate the service.

4. Data Retention & Your Right to Delete

We retain your account data for as long as your account is active.

  • Disconnecting an integration(LinkedIn, Google/YouTube) from your Settings page immediately revokes that connection and deletes the stored credential. For Google, we call Google's own token-revocation endpoint at the same time, so the grant is revoked on Google's side as well, not just stopped on ours. You can also review or revoke Westerly's access at any time directly from your Google Account permissions page.
  • Deleting your account (Settings → delete account) is immediate and irreversible: it cancels your billing, permanently deletes every record tied to your account, including any stored Google/LinkedIn credentials, videos, drafts, and lead data, and deletes your login. There is no recovery period and no soft-delete once you confirm.

You can also email us at hello@westerly.app to request access to, correction of, or deletion of your data, and we will act on that request without requiring you to use the in-product flow.

5. Who We Share Data With

We do not sell your data, and we do not share it with third parties for their own marketing purposes. We share data only with the service providers that power the product, each acting on our instructions:

  • Stripe: payment processing
  • Supabase: database, authentication
  • Unipile: LinkedIn connectivity
  • Google / YouTube: video publishing and analytics, when you connect your account
  • Anthropic: AI-generated drafts and coaching
  • Resend: transactional and newsletter email delivery
  • Fathom: call transcripts, if you connect it, to match calls to leads
  • Tella: video library access, if you connect it
  • Cloudflare: file storage and link-tracking infrastructure
  • PostHog: product analytics
  • Google Analytics: visit and signup measurement on westerly.app and the sign-up and pricing pages
  • Sentry: error monitoring
  • Vercel: application hosting

We may also disclose information if required by law, or to protect the rights, property, or safety of Westerly, our customers, or others.

6. Your Rights

Regardless of where you live, you can ask us to access, correct, export, or delete your personal data, and you can opt out of non-essential email at any time using the unsubscribe link in any message. If you are in the European Economic Area, the UK, or California, you may have additional rights under GDPR, UK GDPR, or the CCPA respectively (including the right to lodge a complaint with your local data protection authority). Contact us and we will honor applicable requests.

7. International Data Transfer

Westerly's infrastructure is hosted in the United States. If you access Westerly from outside the U.S., your information will be transferred to and processed in the U.S.

8. Children's Privacy

Westerly is a business tool and is not directed at, or knowingly used by, children under 16. We do not knowingly collect personal information from children.

9. Changes to This Policy

We'll update the "Last updated" date above whenever this policy changes, and notify you by email or in-product notice for material changes.

10. Contact Us

Questions about this policy or your data: hello@westerly.app.