Privacy Policy
Last Updated: September 3, 2026
1. What MailFlow Does
MailFlow is an email management and filtering service that connects to a user's Gmail account through Google's OAuth 2.0 authorization system and Gmail API. The Service helps users organize and filter Gmail messages according to features and rules selected by the user. Gmail access is granted only after the user explicitly authorizes the requested permissions through Google's OAuth consent screen.
2. Information We Access
Depending on the features you use and the permissions you authorize, MailFlow may access Gmail message information required for filtering, sender and recipient information, email subject lines, email message content when required to perform filtering, Gmail labels and message metadata, and information required to identify and process messages selected by the user. We request only the Google API permissions necessary to provide the functionality available in the Service. We do not request access to Google user data for future features that have not been implemented.
3. How We Use Google User Data
We use information obtained through Google APIs only to provide the functionality of MailFlow visible and available to the user. Gmail data may be used to identify emails according to selected filtering rules, categorize or organize emails, apply or remove Gmail labels when authorized, provide requested email-management features, display relevant filtering results and status information, and maintain the functionality, security, and reliability of the Service. We do not use Google user data for advertising purposes. We do not sell Google user data. We do not use Google user data for creditworthiness, lending, insurance, employment, or similar eligibility decisions. We do not use Google user data for purposes unrelated to the user-facing functionality of MailFlow.
4. Google API Services User Data Policy
MailFlow's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is used only to provide or improve user-facing features that are prominent in the application and only as permitted by Google's policies.
5. Data Storage
MailFlow stores only the information reasonably necessary to provide the Service. This may include account identifiers, OAuth credentials or tokens required to maintain the authorized connection to Gmail, user-created filtering rules and preferences, and technical information required for security, troubleshooting, and service operation. Where Gmail message content is temporarily processed, it is processed only for the purpose of providing the filtering functionality requested by the user. MailFlow does not permanently store the full content of Gmail messages. Message content is processed only as necessary to perform the requested filtering functionality and is discarded when it is no longer required.
6. Data Sharing and Transfers
We do not sell, rent, or trade Google user data. We do not share Google user data with third parties except where necessary to provide a user-facing feature explicitly requested by the user, operate or secure the Service through a service provider acting on our behalf, comply with applicable law, legal process, or a valid governmental request, or protect the rights, security, and integrity of MailFlow, our users, or others. Any service provider that processes user data on our behalf is permitted to process that data only for purposes necessary to provide the relevant service. We do not transfer Google user data to third parties for advertising, marketing, or independent data brokerage purposes.
7. AI and Automated Processing
MailFlow does not send Gmail message content to external artificial intelligence or machine-learning services. This statement must be updated if the production implementation changes.
8. Security
We take reasonable technical and organizational measures to protect user information against unauthorized access, loss, misuse, alteration, or disclosure. Security measures may include encryption during transmission, secure storage of authentication credentials and OAuth tokens, access controls, authentication mechanisms, monitoring and logging for security purposes, and restricting access to user data to authorized systems and personnel where necessary. No method of electronic storage or transmission can be guaranteed to be completely secure.
9. OAuth and Google Account Access
Users authorize MailFlow through Google's OAuth authorization process. MailFlow does not ask users to provide their Google password. Users may revoke MailFlow's access to their Google account at any time through their Google Account security settings. After access is revoked, MailFlow will no longer be able to access the Google account through the revoked authorization.
10. Data Retention and Deletion
We retain information only for as long as reasonably necessary to provide the Service, maintain security, comply with legal obligations, resolve disputes, and enforce our agreements. Users may request deletion of their MailFlow account and associated data by contacting us at [SUPPORT EMAIL]. Upon a valid deletion request, we will delete or anonymize applicable information within a reasonable period, except where retention is required by law or necessary for legitimate security or legal purposes. Revoking Google access and deleting a MailFlow account are separate actions.
11. Children's Privacy
MailFlow is not intended for children under the age of 13, or the minimum age required by applicable law in the user's jurisdiction. We do not knowingly collect personal information from children in violation of applicable law.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the Last Updated date and, where appropriate, provide additional notice through the Service. Users are encouraged to review this Privacy Policy periodically.
13. Contact Us
MailFlow Website: [WEBSITE URL] Email: [SUPPORT EMAIL] Developer/Company: [LEGAL COMPANY OR DEVELOPER NAME] Address: [BUSINESS ADDRESS, IF APPLICABLE]