PRIVACY POLICY

Last Updated: July 18, 2026

1. INFORMATION WE COLLECT

We collect information needed to provide EmailSnapshot, including:

Account information such as your email address and authentication information
Emails you forward to an EmailSnapshot forwarding address
If you connect Gmail, OAuth credentials, the connected Gmail address, and messages matching senders or domains you configure for a snapshot
Summaries, dates, action items, and links derived from processed emails
Operational information needed for security, reliability, billing, and support

2. HOW WE USE EMAIL DATA

We use email data only to provide user-facing EmailSnapshot features you request, including summaries, digests, calendar entries, and alerts.

We do not use email data for advertising or marketing targeting
We do not sell email data
We do not use email data to train or improve generalized artificial-intelligence models
Support personnel do not read Gmail-derived content unless you explicitly authorize access to specific data, or access is required for security or legal compliance

3. GOOGLE WORKSPACE AND GMAIL DATA

Connecting Gmail is optional. EmailSnapshot requests read-only Gmail access so it can locate messages from exact senders or domains that you add to a snapshot. EmailSnapshot cannot send, modify, or delete your Gmail messages.

We query Gmail for candidate messages matching your configured sources and verify the sender locally
Message bodies are fetched only for locally verified matches
Gmail message bodies are processed transiently and are not stored in our incoming-email tables
Derived summaries and extracted information are encrypted and retained while your account remains active
OAuth credentials are encrypted at rest and are revoked when you disconnect Gmail or delete your account
You can remove individual sources, disconnect Gmail, or delete your account at any time

EmailSnapshot's use and transfer of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. ARTIFICIAL-INTELLIGENCE PROCESSING AND SERVICE PROVIDERS

Relevant email content is transmitted securely to contracted infrastructure and artificial-intelligence service providers, currently including OpenRouter and the model provider selected through that service, solely to generate the user-facing analysis you requested. For all artificial-intelligence processing, we restrict routing to providers that do not collect or retain submitted content and do not use it to train or improve generalized models.

We may also use providers for hosting, email delivery, payments, error monitoring, and security. Providers receive only the information necessary to perform their contracted services.

5. DATA SECURITY

Email content, summaries, and OAuth credentials are encrypted at rest
Data is encrypted in transit
Access is limited to authorized systems and personnel
We maintain security controls for authentication, rate limiting, logging, and account deletion

6. DATA RETENTION

Gmail message bodies: processed transiently and not persisted by the Gmail ingestion path
Parsed forwarded-email content: normally removed after 24 hours; failed processing records may be retained for up to 7 days
Raw inbound transport copies for forwarded email: retained for no more than 30 days
Email summaries and derived information: retained until you delete them or your account
Gmail OAuth credentials: retained until disconnection, revocation, or account deletion

7. YOUR CHOICES AND RIGHTS

Access and update your account information
Remove Gmail sender and domain sources
Disconnect Gmail without deleting your EmailSnapshot account
Delete your account and associated data
Opt out of digest emails
Request help regarding your personal information

8. CONTACT US

For privacy concerns or questions, contact [email protected].

9. CHANGES TO THIS POLICY

We may update this policy as our service or legal obligations change. We will post the revised policy here and update the date above. If a material change affects how we use Google user data, we will provide appropriate notice and obtain consent where required.