Privacy Policy

Effective September 27, 2026

1. Scope

This policy explains how Personal Mail Assistant (the “Application”) accesses, uses, stores, and shares information when an approved account holder connects a Google account. The Application is not offered as a general public email service.

2. Information accessed

Depending on the permissions granted by the account holder, the Application may access:

• Google account identity information needed to identify the authorized account;
• email headers, sender and recipient information, timestamps, labels, thread identifiers, attachments, and message content; and
• mailbox state needed to carry out actions such as searching, labeling, starring, archiving, drafting, or sending messages when explicitly requested or configured.

3. How information is used

Google account data is used solely to provide user-facing mail automation, including search, summarization, prioritization, organization, and actions requested or configured by the authorized account holder. The Application does not use Google account data for advertising, credit decisions, or profiling unrelated to these functions.

4. Automated and AI processing

Message content or metadata may be processed by automation and AI service providers when needed to complete an authorized function such as classification or summarization. These providers receive only the information needed to perform that function and act as service providers, not advertisers or data brokers.

5. Storage and retention

• OAuth credentials are stored in an operating-system credential store or another access-controlled secret store.
• Mail content is processed only as needed to provide the requested function. Limited operational records, such as message identifiers, metadata, short summaries, and action results, may be retained for continuity, reliability, and audit purposes.
• Information is retained only for as long as necessary for those purposes or as required by law. An authorized account holder may request deletion using the contact below.

6. Sharing and disclosure

The Application does not sell or rent personal information. Information may be disclosed only to infrastructure or AI service providers needed to operate the Application, when directed by the authorized account holder, when required by law, or to protect the security and integrity of the service.

7. Security

The Application uses reasonable safeguards, including encrypted network transport, access controls, and protected credential storage. No system can guarantee absolute security, but access is limited to approved accounts and operational needs.

8. User control and deletion

An account holder may revoke Google access at any time from the Google Account permissions page. Revocation stops future API access. To request deletion of Application-held operational data, contact admin@densematrix.ai.

9. Google API data

The Application’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

10. Changes to this policy

This policy may be updated when the Application’s functionality or legal obligations change. The effective date above will be updated when material changes are published.

11. Contact

For privacy questions or data requests, contact admin@densematrix.ai.