Privacy Policy

Introduction

Mail Genie ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Mail Genie service, which provides AI-powered email filtering for Gmail ("Service").

We take your privacy seriously. Please read this Privacy Policy carefully. By using our Service, you consent to the data practices described in this policy.

Information We Collect

Information You Provide

When you register for and use our Service, we collect:

• Your Google account profile information (name, email address, profile picture)
• Your OAuth access and refresh tokens (to access your Gmail account)
• Payment information (processed securely through Stripe)

Gmail Data We Access

To provide our email filtering service, we access the following Gmail data:

• Email metadata (sender, recipient, subject, date, labels)
• Email content (body text and thread context for classification)
• Attachment information (file names, types, and sizes - not content)
• Gmail labels and folder organization

Service Data We Store

We collect and store the following data to provide and improve our Service:

• Your account settings and email filtering preferences
• Email processing statistics (number of processed, archived, and kept emails)
• Machine learning data (user-specific patterns from your email corrections to improve your personal classification accuracy only - never used for generalized AI/ML model training)
• Always-keep sender email addresses (senders you designate as always important)
• Billing and subscription information

How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our email filtering Service
• Process and classify your emails according to your preferences
• Apply labels to your Gmail messages (processed, black_hole, always_keep)
• Archive emails that don't require your attention
• Personalize your experience based on your preferences and feedback
• Create and update custom AI prompts tailored to your email patterns
• Process payments and manage your subscription
• Analyze usage patterns to improve our Service (using anonymized data only)
• Respond to your support requests and inquiries
• Send important service-related communications
• We do NOT use your Gmail data or any data obtained through Google Workspace APIs to develop, improve, or train generalized AI or machine learning models

Third-Party Services

Our Service uses the following third-party services:

• Google Gmail API: To access and manage your emails. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
• TypeSafe Jev and Anthropic Claude: Relevant email content is sent through Vercel AI Gateway to TypeSafe Jev for classification with zero data retention requested. Anthropic Claude receives representative examples for setup and evidence-backed learning.
• Stripe: For secure payment processing. We do not store your credit card information.
• MongoDB Atlas: For secure database storage of user settings and tokens.
• Vercel: For application hosting and the AI Gateway used to route model requests.

Google API Services User Data Policy Compliance

Use of Data for AI and Machine Learning

Data Security

We implement appropriate technical and organizational measures to protect your information:

• All communications with our Service are encrypted using SSL/TLS
• OAuth tokens and sensitive data are securely stored with encryption at rest
• Access to our systems is restricted to authorized personnel only
• New raw email body copies are not stored; limited correction evidence and legacy retained fields may include message details
• Operational monitoring
• Secure payment processing through Stripe's PCI-compliant infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security.

Data Retention

We retain different types of data for different periods:

• Email Content: We do not permanently store new raw email body copies. Content is fetched when needed for processing.
• OAuth Tokens: Stored securely until you revoke access or delete your account.
• Account Settings: Stored until you delete your account.
• Processing Statistics: Stored to provide you with usage insights, deleted when you delete your account.
• Correction and policy evidence: We retain at most the latest 200 correction records within 90 days. Policy and action history is bounded and retained for up to 90 days for review and rollback.
• Billing Information: Minimal account-linked acceptance and cancellation evidence is retained in a restricted store for the longer of three years after acceptance or one year after subscription termination. Active subscription evidence remains while billing continues. It contains no email content, OAuth tokens, card details, checkout client secrets or extra age, IP or device data. AI-only consent records are deleted with the account. Abandoned anonymous signup records expire after 24 hours.

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information, including:

• The right to access information we have about you
• The right to rectify, update, or delete your information
• The right to data portability
• The right to withdraw consent at any time
• The right to object to processing of your personal data
• The right to restrict processing in certain circumstances

To exercise these rights, please contact us using the information provided in the "Contact Us" section.

Account Deletion and Data Removal

What Gets Deleted

When you delete your account, we permanently remove:

• Your account and profile information
• All email processing preferences and settings
• Machine learning data and custom AI prompts
• Processing statistics and history
• Always-keep senders list
• AI-only consent records. Gmail label cleanup is best effort and can fail when access is revoked or unavailable.
• All OAuth tokens and access permissions

What Remains Unchanged

Account deletion does NOT affect:

• Your email messages remain in Gmail; deletion does not restore archived messages
• Your Google account (remains active and unchanged)
• Any other Google services or data

How to Delete Your Account

1. Sign in to your Mail Genie account
2. Open Account → Account settings from the dashboard
3. Click "Delete Account" in the Danger Zone
4. Follow the confirmation steps
5. Owned Mail Genie subscriptions are cancelled immediately before application data is purged. Cancellation failure keeps a retryable deletion record; incomplete cleanup can be resumed. Limited financial evidence remains as described above.

Revoking Access

You can revoke Mail Genie's access to your Google account at any time by:

1. Visiting Google Account Permissions
2. Finding Mail Genie in the list of connected applications
3. Clicking "Remove Access"

You can also delete your account directly from our Service settings, which will cancel owned subscription billing before removing application data, with limited financial evidence retained.

Payment and Billing

Mail Genie is a paid service at $2 per month. Payment processing is handled securely by Stripe:

• We do not store your credit card information on our servers
• All payment data is processed securely by Stripe using industry-standard encryption
• You can update or cancel your subscription at any time through your account settings
• Billing information is retained as required by law for tax and accounting purposes

Children's Privacy

Our Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we learn we have collected personal information from a child under 18, we will delete this information immediately.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure that such transfers comply with applicable data protection laws and that your data receives an adequate level of protection.

Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Sending you an email notification for significant changes

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us at: