Privacy you can ship.

When you send a tracked email, we record engagement events: opens (via a tracking pixel and beacon), link clicks, and replies. Each event carries a timestamp, an approximate city derived from IP, and a device type. We also store your account details and the metadata of threads you choose to track.

We do not read the body of your emails beyond what is needed to render the sidebar and generate follow-up suggestions you explicitly request.

Engagement data powers the real-time sidebar, the signal model, and the AI follow-up drafts. We use aggregate, de-identified data to improve the product. We never sell your data or your recipients' data.

MailSenseAI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

When you sign in with Google we request only your basic profile (name and email address) and the send email permission (gmail.send). We use gmail.send for a single purpose: to deliver the follow-up emails you write or explicitly approve. We do not request permission to read, search, or modify your mailbox, and we never access the contents of your inbox through Google's APIs. Open, click, and reply signals are derived from your own already-open Gmail browser session and tracking pixels/links in mail you choose to track — not from Gmail API mailbox access.

Specifically, we commit that our handling of Google user data will:

• be limited to providing and improving the features described above;
• never be used for advertising, and never be sold or transferred to third parties except as needed to provide the service, comply with law, or in a merger you are notified of;
• never be used to train generalized or third-party AI/ML models;
• never be read by humans unless we have your affirmative consent, it is necessary for security or to comply with applicable law, or the data is aggregated and anonymized.

You can review or revoke MailSenseAI's access at any time from your Google Account permissions page.

You can enable an optional one-line consent footer — workspace-wide or per send — so recipients know engagement is being measured. A full audit log of everything we collected on a thread is available on request and exportable from the dashboard.

If you are in the EEA or UK, you have the right to access, correct, export, or delete your personal data, and to object to or restrict processing. The lawful basis for processing is our legitimate interest in providing the service and your consent where required. Email privacy@mailsenseai.com to exercise any of these rights; we respond within 30 days.

For business customers, MailSenseAI acts as a data processor for the engagement data of your recipients. A Data Processing Addendum (DPA) incorporating the EU Standard Contractual Clauses is available on request for business customers.

We rely on the following sub-processors to deliver the service:

• Vercel — application hosting and edge delivery
• Neon — managed Postgres database
• Resend — transactional and digest email
• Stripe — billing and payments
• Anthropic — AI follow-up draft generation

We notify customers of material changes to this list with reasonable notice before a new sub-processor begins handling data.

Engagement history is retained according to your workspace's retention window (configurable in Settings, 90 days by default) and deleted on account closure. You can request earlier deletion at any time.

Questions about this policy? Email privacy@mailsenseai.com.