Privacy Policy

Last Updated: March 3, 2026

Welcome to MailRefined. We are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our application.

Please read this carefully. If you do not agree with these terms, please do not access the application.

1. Information We Collect

a. Information from Google

When you sign in with Google, we collect:

• Identity: Your name, email address, and Google user ID (sub).
• Authentication Tokens: Encrypted OAuth access and refresh tokens stored securely.

b. Data from Your Google Account

• Gmail (Read-Only): We request gmail.readonly permission to scan recent email metadata and content for task classification. We do not permanently store email bodies.
• Google Tasks: We create and manage tasks on your behalf based on email classification.

c. Third-Party Services

• LLM Providers: Email content is sent to a third-party LLM to classify emails into tasks.

d. Log Data

Our servers automatically collect standard log data including IP address, request details, and error information.

2. How We Use Your Information

We use your information to provide the service, classify emails, organize tasks, maintain security, monitor and improve the service, and communicate with you.

3. How We Share Your Information

We do not sell your personal information. We share data only with LLM providers (for classification), Google (to use their APIs), cloud infrastructure providers (Microsoft Azure), and when required by law.

4. Data Storage and Security

Your data is hosted on Microsoft Azure (East US). Sensitive data like tokens are encrypted at rest, all data is encrypted in transit (TLS), and we use Row-Level Security (RLS) for data isolation.

5. Your Rights and Choices

• Revoking Access: You can revoke access at any time via your Google Account security settings.
• Account Deletion: Contact us to request deletion of your account and associated data.

6. Data Retention

• Active user data: Retained while your account is active.
• Backups: May persist for up to 90 days after deletion.
• Log data: Retained for a maximum of 7 days.

7. Children's Privacy

Our service is not directed to individuals under the age of 13.

8. Changes to This Policy

We may update this policy from time to time. Changes will be posted on this page.

9. Contact Us

Questions? Reach us at privacy@smarteremail.example.com.