Privacy

What Mailroom reads. Message metadata only: sender, subject, date, Gmail's short preview snippet, labels, and bulk-mail headers. Message bodies are never fetched, stored, or sent anywhere.

What Mailroom stores. Your Google account id and email, an encrypted refresh token, your policy settings, run receipts (which labels changed on which message ids), sender statistics, and cached AI judgments about individual messages. Data lives in a Postgres database hosted by Neon in the United States.

What leaves Google. For triage and search, the metadata above is sent to TypeSafe (typesafe.ai), which returns typed probabilities and does not train on requests. Nothing is sent to any other third party.

What Mailroom does to your mailbox. It adds and removes labels, archives, marks read, and moves messages to Gmail's Trash, where Gmail keeps them for 30 days. It never sends mail, never unsubscribes on your behalf, and never deletes anything permanently.

Deleting your data. Disconnect from the dashboard. That revokes the Google token and deletes every row Mailroom holds about you. Labels already in your Gmail stay yours.

Analytics. The public pages (the home page, this privacy page, and the terms) use Google Analytics 4 when you are not signed in. It measures visits (pages, device, approximate location) so we can see what people use. It never runs in the signed-in app and never sees your mail, your searches, or your email address. No ads or ad personalization. Visitors in the EEA, the UK, and Switzerland are measured without analytics cookies (Consent Mode). To opt out, use tools.google.com/dlpage/gaoptout.

Google API Services. Mailroom's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Contact. Kevin Liu, k.bowen.liu@gmail.com.