Privacy policy
Last updated August 5, 2026
Retainly is a reporting and monitoring tool for agencies on the GoHighLevel platform. It is built and run by one person. This page says what it reads, what it keeps and how to get it deleted, in plain language.
What Retainly reads
When your agency installs Retainly, it reads four things from each of your sub-accounts through the platform's official API, read-only:
- contacts, to count new leads per day and group them by source
- opportunities, to count wins and total their value
- calendar events, to count appointments booked, showed and missed
- payment transactions, to total cash collected net of refunds
What Retainly stores
Aggregates, not records. For each client account Retainly keeps daily counts and totals (leads, appointments, wins, revenue, cash collected), lead counts per source, the sub-account's name and id, alarm history and the report prose your agency edits. Raw API responses are never stored.
It also stores your agency's own account data: the email addresses you sign in with and receive alerts at, plus the address a client's report goes to if you set one.
What it does not store: copies of contact records, message or conversation content, or any login or activity data from your sub-accounts. The platform does not expose that and Retainly never claims it.
How access tokens are protected
The OAuth tokens from your install are encrypted at rest with AES-256-GCM. Only the encrypted form is stored, in a table that only the server can read. Per-location tokens are minted on demand and never persisted.
Where data lives
In a Supabase-hosted Postgres database in the US East region, with row-level security so an agency's users can only ever reach that agency's rows.
Services Retainly relies on
- Supabase, for the database and sign-in
- Vercel, for hosting
- Resend, to send sign-in links, reports and alert emails
- Anthropic, to write the short opening note on each report. The prompt carries trend directions and labels only; no contact records and no figures are sent to it.
Retainly also keeps a small internal event log (an install completed, a report was sent) to operate the product. It holds no recipient addresses and no figures. Nothing is sold, there is no advertising and there are no third-party trackers.
Deleting your data
Uninstall Retainly from your agency account and all reading stops. Then email support@coldops.io from your sign-in address and I delete everything stored for your agency.
Questions
Email support@coldops.io. One person runs Retainly, so that goes straight to the person who built it.