Privacy Policy

1. What We Access

Gmailytics accesses your Gmail account through Google OAuth to provide email analytics. We only access email metadata, which includes:

• Sender email addresses and names
• Date and time emails were received
• Read/unread status
• Gmail labels (categories like Social, Promotions)
• Message size (as reported by Gmail)
• The List-Unsubscribe header, which is how we find unsubscribe links and most newsletters

We never access, read, or store the actual content of your emails.

2. How We Use Your Information

We use the accessed metadata to:

• Generate email volume charts and trends
• Identify your top email senders
• Show daily email activity patterns and trends
• Categorize emails by type (work, personal, social, etc.)
• Perform actions you request: trash or archive emails
• Unsubscribe from newsletters on your behalf by sending requests to unsubscribe URLs found in email headers

3. Data Storage

We never store the content of your emails. We do not store email bodies, subject lines, or attachments. Here is what we do store:

Account information:

• Your email address and account creation date
• Aggregate cleanup statistics: total emails cleaned, the total size of the email you have trashed or archived, and total unsubscribes
• If you subscribe: your plan, what you paid and when, your payment status, and the Stripe customer ID that links your account to your payments (never your card details; see section 6)
• The page or campaign that referred you when you signed up (the referring site and any UTM tags), if there was one
• A log of the emails we have sent you, so the same email is not sent twice
• Records that run the service: whether you signed up on the website or through the browser extension, your free-plan cleanup count for the month and when you reached the limit, when you last used Gmailytics, when the browser extension last synced, your answers to in-app prompts such as a review request, and any reason you give when you cancel

Cleanup history:

• For each cleanup action you take (trash, archive, unsubscribe), we store the sender email address, sender name, the action, the number and total size of the emails affected, and the timestamp
• This allows you to view your cleanup history and undo actions across devices
• If you trash only a sender's unread or only their read emails, we also keep the Gmail message IDs of the emails moved, so Undo restores exactly those. We delete these IDs after 30 days, when Gmail empties its Trash, or as soon as you undo or clear your history.

Inbox snapshots:

• Aggregate statistics from each scan: total email count, storage used, unread count, number of newsletters, number of unique senders, email category breakdown, and the number of emails received each day
• These are summary numbers only — no individual email data is stored

Cached data:

• Your OAuth tokens are stored in an httpOnly cookie in your browser, encrypted with AES-256-GCM, and transmitted only over HTTPS
• If you connect the browser extension, we also store your Google refresh token on our server, encrypted with AES-256-GCM, so the extension can keep your dashboard in sync in the background. When you disconnect from the Gmailytics dashboard, we ask Google to revoke it and remove it from our server; deleting your account also deletes it
• Email metadata is fetched from Gmail's API and cached on our server so the dashboard loads without re-scanning your inbox every visit. This cache persists while your account is active and holds the Gmail message ID, sender address, sender name, date, size, read status, category and unsubscribe link — never subject lines, message bodies or attachments. It is deleted in full when you delete your account.
• Your browser caches email metadata locally for faster loading — you can clear this anytime by disconnecting

In summary: we store your email address and account records (including billing details if you subscribe), cleanup action history (sender names and counts, plus, for 30 days, the IDs of emails you trash by read status so you can undo), aggregate inbox statistics, a cache of email metadata that keeps the dashboard fast, and anonymous daily feature-usage totals. If you use the browser extension, we also store an encrypted Google refresh token. We never store email content, subject lines, or attachments.

4. Data Sharing and Disclosure

We do not sell, rent, or trade your Google user data, and we do not share it with any third parties except the service providers in section 6 that help us run Gmailytics. Specifically:

• We do not share your email metadata, cleanup history, or account information with advertisers, data brokers, or any other external parties
• We do not transfer your Google user data to third parties for their own purposes
• We do not use your Google user data for advertising, market research, or profiling
• Your Google user data is only used internally to provide and improve Gmailytics's core functionality as described in this policy

The only circumstances under which we would disclose your data are:

• If required by law, regulation, or valid legal process (e.g., a court order or subpoena)
• To protect the rights, safety, or property of Gmailytics, our users, or the public

To run the service we use the providers listed in section 6. Each one receives only what its job needs, such as your email address so we can send you an email or take a payment. Apart from our hosting providers, Neon and Vercel, which store and run our systems, none of them receives your Gmail data or anything derived from it.

5. Data Protection

We implement the following security measures to protect your data:

• Encryption in transit: All data transmitted between your browser and our servers uses HTTPS/TLS encryption
• Encryption at rest: Your stored data (account info, cleanup history, inbox snapshots, the email metadata cache and any stored refresh token) is held in a database with encryption at rest enabled
• Secure token storage: Your Google OAuth tokens are encrypted with AES-256-GCM and stored in httpOnly, secure, SameSite cookies — they are never exposed to client-side JavaScript or third-party scripts. The refresh token we keep for the browser extension is encrypted with AES-256-GCM before it is written to our database
• Minimal data collection: We only access the minimum data necessary to provide our service — email metadata, never email content or attachments
• Metadata only, never content: The email metadata cache described in section 3 never holds subject lines, message bodies or attachments. It persists while your account is active and is deleted in full when you delete your account
• Access controls: Database access is restricted to the application only, protected by environment-level credentials that are not exposed publicly

6. Third-Party Services

Gmailytics uses Google's Gmail API to access your email metadata. Your use of Gmailytics is also subject to Google's Privacy Policy and Terms of Service. We use the gmail.modify scope. It is the narrowest Google permission that lets us trash or archive emails when you ask us to, and we use the List-Unsubscribe header from your email metadata to unsubscribe you from newsletters. The same scope would allow an app to read full email content, which is why Google requires an independent CASA Tier 2 security assessment for it; Gmailytics passed that assessment. We do not use it to read content: every request we make to Gmail asks for message metadata only and names just three headers (From, Date and List-Unsubscribe), so subject lines and message bodies never reach our servers. We never perform any actions on your emails without your direct instruction.

Gmailytics's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We use Ahrefs Analytics to collect anonymous usage data such as page views and feature usage. This helps us understand how the product is used and improve it. Ahrefs does not receive any of your email data or Gmail account information. We also count how often dashboard features are used, for example how many times the Stats tab is opened each day. These counts are daily totals kept on our own servers, with no account identifier and no email data.

We also use these service providers to run Gmailytics:

• Stripe processes payments. When you subscribe it receives your email address, your plan and our internal account number. Card details are entered on Stripe's checkout page and never reach our servers.
• Brevo delivers the emails we send you, such as the welcome email, payment and cancellation confirmations, and an occasional review request. It receives your email address and the email itself, which never includes data from your Gmail account.
• Formspree receives what you type into the dashboard's feedback form, including your email address if you add it.
• Neon hosts our database, which is encrypted at rest.
• Vercel hosts the website and our servers, so it handles the requests your browser sends us, including your IP address.

7. Data Retention

We retain your account data and cleanup history for as long as your account is active. You can delete your account at any time from the Profile tab of the dashboard. This immediately deletes your stored data (account info, billing records, cleanup history, inbox snapshots, the email metadata cache and any stored refresh token) and asks Google to revoke our access to your Google account. You can also email us and we will delete it within 30 days. Disconnecting from the dashboard clears all locally cached data from your browser immediately.

After deletion, a few copies remain for a limited time or without anything that identifies you: our database keeps a 7-day recovery history, after which deleted data is gone from it; our diagnostic records and backups of cleanup counts hold only an internal account number with counts and dates (no email address, sender or email data), so they can no longer be linked to you; and Stripe, Brevo and Formspree keep their own records of payments, sent emails and feedback messages under their own retention policies.

The server-side cache of email metadata (sender, date, size, read status, category and unsubscribe link — never subject lines or message content) persists while your account is active, because it is what lets the dashboard load without re-scanning your inbox on every visit. It is refreshed as you sync and removed entirely when you delete your account, which also revokes our access to your Google account.

8. Your Rights

You have full control over your data:

• Revoke access anytime through your Google Account settings at myaccount.google.com/permissions
• Disconnect from Gmailytics to clear all locally cached data
• Delete your account and all stored data yourself at any time from the Profile tab of the dashboard (see section 7), or ask us to by emailing jacob@gmailytics.com

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have any questions about this Privacy Policy, your data, or security concerns, contact us at jacob@gmailytics.com.