← mailbrain

Privacy Policy

Last updated: May 2026

Overview

mailbrain is an AI-powered email triage tool. It connects to your Gmail account via Google's official OAuth 2.0 API, reads your emails, and categorises them so you can focus on what matters. This policy explains what data we access, how we use it, and your rights.

What data we access

mailbrain requests read-only access to your Gmail inbox (gmail.readonly scope). This allows us to:

• Read email message headers (sender, subject, date)
• Read email message bodies to generate AI summaries and categories
• Receive push notifications from Google when new messages arrive

We do not request permission to send, delete, move, or modify any emails or labels.

How we use your data

Email content is used solely to provide the mailbrain service:

• Message text is sent to an AI model (via OpenRouter) to generate a one-line summary and assign a triage category (urgent, respond, read, digest, parcel, payment).
• Summaries and categories are stored in our database so the app can display your triage feed.
• Raw email bodies are not stored persistently — only the AI-generated summary and metadata are retained.

We do not use your email data to train AI models, serve advertising, or build profiles for any purpose other than providing mailbrain.

Data sharing

We do not sell, rent, or share your personal data with third parties except as strictly necessary to operate the service:

• Google APIs — to read your Gmail messages (governed by Google's Privacy Policy).
• OpenRouter / AI model provider — email text is sent to generate summaries. OpenRouter's data handling policy applies to this processing.

mailbrain's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention

Your OAuth refresh token and email summaries are stored for as long as your account is active. You can disconnect your account at any time, which immediately deletes your refresh token and all associated data from our database.

Security

Refresh tokens are stored encrypted at rest. All data is transmitted over HTTPS. We do not log or store raw email bodies.

Your rights

You may at any time:

• Revoke mailbrain's access to your Google account via Google Account Permissions.
• Request deletion of all data we hold about you by emailing us.
• Disconnect your account from within the app, which triggers immediate data deletion.

Contact

Questions or data deletion requests: miantalhaashraf@gmail.com