# What data does CTD collect?

CTD handles sensitive relationship data. Here's a precise account of what we collect, what we don't, and why each decision was made.

## What CTD reads from your email

By default, CTD reads only **email metadata** — not the body of your emails. Specifically:

- **From, To, CC, BCC** — who you communicated with
- **Date and time** — when you communicated

This is everything CTD needs to build your relationship graph, score your connections, and surface warm intro paths.

**We do not read or store email bodies by default.** The content of what you write to people is never accessed or retained.

## Optional: email body access (Read-only scope)

You can optionally grant CTD read access to email bodies. If you do:

- **Signature processing** — CTD parses email signatures to automatically extract contact details: phone numbers, Calendly links, job titles, and other information people include in their signatures. This enriches contact profiles without any manual data entry.
- You'll be able to read your own email threads directly within CTD when looking at a contact
- CTD **never stores email bodies** — they are fetched on demand and displayed only to you
- Email bodies are never retrieved without a specific action on your part
- This access is used solely to surface emails for a better experience — nothing else

You can revoke this access at any time from CTD's settings or directly from your Google or Microsoft account.

## What CTD does not access

- Email body content (unless you explicitly grant optional access)
- Email attachments
- Calendar event details or meeting notes
- Slack, Teams, or any other messaging platform
- Your passwords — CTD connects via OAuth only

## LinkedIn connections

You can optionally import your LinkedIn connections via a CSV export from LinkedIn. CTD stores only names, companies, and roles from this export — no messages, no activity data, no other LinkedIn information.

## How relationship scores are calculated

CTD calculates relationship strength scores using only email metadata signals: frequency of contact, recency, and whether communication is bidirectional. No AI reads your email content to infer sentiment or intent.

See [How CTD stores and protects your data](/content/guide/article/security-data-storage/index.html) for details on encryption and infrastructure security.

Have a question or running into an issue? Email us at [support@ctd.ai](mailto:support@ctd.ai) — we're happy to help.