Privacy Policy

1Information We Access and Collect

When you connect a Google account to Email Management, we may access and process the following categories of information through the Gmail API.

1.1 Google Account Information

We may access:

• Google account name or profile name;
• Google account email address;
• information necessary to identify the Google account connected to Email Management.

We use this information to identify the connected account, associate the account with the appropriate Email Management account, and provide the requested email management functionality.

1.2 Gmail Messages

Depending on the functionality you use, Email Management may access Gmail message information, including:

• Gmail message ID;
• thread or conversation information;
• sender and recipient information;
• email subject;
• email body and message content;
• message date and time;
• message headers and other relevant message metadata;
• labels and read/unread status;
• information necessary to display and manage email conversations.

We access this information only to provide the email management functions described in this Privacy Policy.

1.3 OAuth Authorization Information

When you authorize Email Management to access your Google account, we may receive and securely store OAuth authorization information, which may include:

• OAuth access tokens;
• OAuth refresh tokens;
• token expiration information;
• information identifying the authorized Google account.

OAuth tokens are used to make authorized requests to the Gmail API on your behalf.

We do not sell OAuth tokens or use them for advertising or unrelated purposes.

1.4 Application Account Information

In addition to Google user data, Email Management may collect information required to operate an application account, such as:

• application login email address;
• securely hashed application password, where applicable;
• account settings;
• authorization status;
• technical logs and security information necessary to operate and protect the service.

Application account information is separate from the Google user data accessed through the Gmail API, although the two may be associated when you connect a Google account to your Email Management account.

2How Email Management Accesses Google User Data

Email Management accesses Google user data through Google's authorized APIs.

Email Management accesses Gmail data only when necessary to provide the email management functionality requested by the user. It does not access Gmail data continuously or for purposes unrelated to that functionality.

This may occur when:

• you connect and authorize your Google account;
• the application synchronizes your Gmail messages;
• you open or search an email conversation;
• you request the application to send or reply to an email; or
• you use an email management or automation feature that requires access to Gmail data.

Email Management does not access Google user data unrelated to the email management functionality described in this Privacy Policy.

We request only the Google API permissions necessary for the functionality provided by the application.

3Gmail API Scope

Email Management uses the following Gmail API OAuth scope:

This scope allows the application to read Gmail messages and modify message state and labels as permitted by Gmail. Email Management uses this access to provide email synchronization, organization, conversation management, and other Gmail functionality described in this Privacy Policy.

Where Email Management sends or replies to an email, it uses the authorized Gmail API functionality necessary to perform that user-requested action.

Email Management does not describe this permission as read-only because the gmail.modify scope permits modification of Gmail data within the scope of the authorization granted by the user.

Email Management uses this access only for the user-facing email management functionality described in this Privacy Policy.

4How We Use Google User Data

We use Google user data only to provide and improve the user-facing functionality of Email Management. Specifically, we may use Google user data for the following purposes.

4.1 Account Identification

We use the Google account name and email address to identify the Google account connected to Email Management and associate it with the appropriate application account.

4.2 Email Synchronization

We use Gmail message IDs, thread information, timestamps, sender and recipient information, subjects, message bodies, labels, and related metadata to synchronize email conversations with Email Management.

4.3 Email Display and Search

We use email subjects, message content, participants, timestamps, and related metadata to display conversations and allow users to locate and manage their emails through the application.

4.4 Email Organization and Management

We may use Gmail message metadata, labels, and read/unread information to provide email organization and management features.

4.5 Sending and Replying to Emails

When a user requests that Email Management send or reply to an email, we use the information necessary to perform that action through the Gmail API.

4.6 Maintaining Application Functionality

We may process Google user data as necessary to maintain, troubleshoot, secure, and improve the email management features that are visible and available to users within Email Management.

5Data Use Restrictions

Email Management does not use Google user data for purposes unrelated to providing or improving the email management functionality described in this Privacy Policy.

We do not use Google user data for:

• targeted advertising;
• personalized advertising;
• retargeted advertising;
• interest-based advertising;
• selling data to data brokers;
• providing data to information resellers;
• determining credit-worthiness;
• lending purposes;
• creating advertising profiles;
• unrelated commercial purposes.

We do not sell Google user data.

We do not use Google user data to create, train, or improve generalized or non-personalized artificial intelligence or machine-learning models.

6Google User Data and Third-Party Services

Email Management may use third-party infrastructure and service providers that are necessary to operate, secure, maintain, and provide the service.

Depending on the technical infrastructure used by Email Management, these service providers may provide services such as:

• cloud server hosting (Email Management is deployed on Huawei Cloud infrastructure);
• database hosting;
• secure data storage;
• network infrastructure;
• security services;
• monitoring and logging;
• backup and disaster recovery.

Email Management is currently deployed on Huawei Cloud, which provides the cloud server hosting, network infrastructure, and related platform services used to run the application. Huawei Cloud acts as our infrastructure service provider and processes Google user data only as necessary to host and operate Email Management on our behalf.

Where a service provider processes Google user data on our behalf, the provider may access only the information necessary to perform the service for Email Management.

We do not transfer Google user data to third parties for advertising, data brokerage, data resale, credit evaluation, lending, or unrelated purposes.

We may disclose information where required by applicable law, regulation, legal process, court order, or governmental request, or where necessary to protect the security and integrity of Email Management, its users, or the public.

7Human Access to Google User Data

Email Management is designed to limit human access to Google user data.

Our personnel and service providers do not access the contents of users' Gmail data for advertising, profiling, or unrelated purposes.

Human access may occur only when reasonably necessary for purposes such as:

• providing support requested by the user;
• investigating a security incident or suspected abuse;
• troubleshooting a technical problem;
• maintaining or securing the service;
• complying with applicable legal obligations.

Where human access is necessary, access is limited to the information reasonably required for the relevant purpose and is subject to appropriate access controls.

8Data Storage

Email Management may store certain Google user data on its application infrastructure in order to provide email management functionality.

Depending on the features used, stored information may include:

• Google account identifier;
• Google account email address;
• Gmail message IDs;
• conversation or thread information;
• sender and recipient information;
• email subjects;
• email content required by the application;
• timestamps;
• Gmail labels and message status;
• OAuth authorization information;
• application-related metadata.

Email content and metadata may be stored so that Email Management can provide conversation history, synchronization, search, organization, read/unread status, and other email management features requested by the user.

We do not retain Google user data merely for unrelated data collection purposes.

9OAuth Token Security

OAuth access tokens and refresh tokens are sensitive authentication information.

Email Management takes reasonable technical and organizational measures to protect OAuth credentials, including:

• transmitting data over HTTPS/TLS;
• restricting access to OAuth credentials to authorized server-side components;
• not exposing OAuth tokens in client-side application code;
• using access controls for application infrastructure;
• applying authentication and authorization controls;
• monitoring relevant security and technical events.

OAuth credentials are not intentionally displayed to other users.

10Data Security

We use reasonable technical and organizational safeguards designed to protect Google user data against unauthorized access, disclosure, alteration, or destruction.

Security measures may include:

• HTTPS/TLS for data transmission;
• server-side access controls;
• authentication and authorization mechanisms;
• role-based access controls where applicable;
• secure password hashing for application passwords;
• restricted access to production systems;
• protection of OAuth credentials;
• security monitoring and technical logging;
• regular maintenance and security updates.

11Data Retention

Active application data is retained only for as long as necessary to provide the service or while your account remains active, and otherwise only as reasonably necessary to provide the functionality described in this Privacy Policy, comply with applicable legal obligations, resolve disputes, prevent abuse, and protect the security of the service.

When data is deleted from active systems, copies may temporarily remain in protected backups for disaster-recovery purposes. Backup copies are not actively used for normal application operations and are permanently deleted within 90 days.

Different types of data may have different retention periods.

Google Account Information

Google account identification information may be retained while the corresponding Email Management account remains active or as otherwise necessary for legitimate operational or legal purposes.

Gmail Message Data

Gmail message content and metadata are retained only while necessary to provide conversation history, synchronization, search, organization, read/unread status, and other email management functionality described in this Privacy Policy.

OAuth Tokens

OAuth access and refresh tokens are retained only while the user maintains an active authorization or while technically necessary to maintain the authorized Gmail connection. When authorization is revoked, or a token expires, is revoked, or is replaced, the corresponding credentials are no longer used to access Gmail.

Application Account Data

Application account information is retained while the account remains active or as necessary to provide the service, comply with legal obligations, resolve disputes, prevent abuse, and protect security.

Security and Technical Logs

Security and technical logs may be retained for a reasonable period necessary to maintain service security, troubleshoot technical problems, investigate abuse, and comply with applicable legal obligations.

Backups

Deleted information may temporarily remain in encrypted or otherwise protected backups for disaster-recovery purposes, as described above. Backup copies are kept only for the duration of the applicable backup lifecycle and are not used for normal application operations.

When information is no longer required for the purposes described above, we will delete it or securely dispose of it, subject to applicable legal and operational requirements.

12Google Authorization Revocation

Users can revoke Email Management's access to their Google account through their Google Account security settings.

When Google authorization is revoked:

1. Email Management can no longer use the revoked authorization to access Gmail through the Gmail API;
2. the associated authorization credentials will no longer be used for new Gmail API access;
3. Email Management will stop obtaining new Gmail data through that authorization;
4. previously stored application data may remain until deleted according to the applicable deletion process described in this Privacy Policy.

Revoking Google authorization does not necessarily delete information that was previously stored in the Email Management application.

Users may separately request deletion of stored Google user data as described below.

13Data Deletion

Users may request deletion of their Google user data stored by Email Management.

A deletion request may include deletion of:

• stored Gmail message content;
• Gmail message metadata;
• Google account information associated with Email Management;
• OAuth access tokens;
• OAuth refresh tokens;
• application records associated with the Google account.

To request deletion, contact us using the contact information provided in Section 18 of this Privacy Policy.

After receiving a valid deletion request, we will delete the applicable Google user data from active systems within a reasonable period, subject to:

• legal retention requirements;
• security and fraud-prevention requirements;
• necessary technical backup and disaster-recovery processes.

Data retained in backups will be isolated from normal application use and deleted or overwritten according to the applicable backup lifecycle.

14Information We Do Not Collect Through Google APIs

Email Management does not request access to Google services or data that are not necessary for its disclosed email management functionality.

Unless separately disclosed and authorized by the user, Email Management does not request access through Google APIs to services such as:

• Google Drive;
• Google Photos;
• Google Calendar;
• Google Contacts;
• Google Maps;
• other Google services unrelated to the application's email management functionality.

If additional Google services or permissions are introduced in the future, this Privacy Policy and the applicable authorization disclosures will be updated before those services are used.

15Google API Services Limited Use Disclosure

Email Management's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Google user data obtained through Google APIs will be used only to provide or improve user-facing features that are part of Email Management and are described in this Privacy Policy.

Email Management does not sell Google user data.

Email Management does not use Google user data for advertising or unrelated purposes.

Email Management does not use Google user data to train or improve generalized or non-personalized artificial intelligence or machine-learning models.

Any transfer of Google user data to service providers is limited to what is necessary to provide or improve the disclosed Email Management functionality, maintain security, comply with applicable law, or otherwise satisfy permitted uses under the applicable Google policies.

16User Choices and Control

Users control whether they connect their Google account to Email Management.

Users may:

• choose whether to authorize Gmail access;
• revoke Google authorization;
• stop using Email Management;
• request deletion of stored Google user data;
• request information about the data associated with their Email Management account.

Revoking authorization prevents future Gmail API access but does not automatically remove data that was previously stored by the application. Users can separately request deletion as described in this Privacy Policy.

17Changes to This Privacy Policy

We may update this Privacy Policy when our services, data practices, security measures, or applicable legal requirements change.

When we make material changes to the way we access, use, store, or share Google user data, we will update this Privacy Policy and the "Last Updated" date.

Users should periodically review this page for the latest information about our data practices.

18Contact Us

If you have questions about this Privacy Policy, Google user data, data deletion, or the use of Gmail data by Email Management, please contact us through the contact information provided on the Email Management website.

19Summary of Google User Data Handling

For clarity, the following summarizes how Email Management handles Google user data:

Google user data is not sold, used for advertising, or used to train generalized or non-personalized AI/ML models.

Email Management uses Google user data only for the email management functionality disclosed in this Privacy Policy and in accordance with the Google API Services User Data Policy and applicable Limited Use requirements.