mailsweep is an inbox cleanup tool, operated by INFINITY COURSEMATE PRIVATE LIMITED. It connects to your Gmail account, groups your inbox so you can act on many messages at once, and carries out the actions you ask for. This policy explains exactly what it reads, what it stores, and how to remove it all.
What we access from your Google Account
When you sign in, you grant the gmail.modify scope along with your basic profile (openid, email). We use them for these purposes and nothing else:
- Reading message metadata — to group your inbox and show you what is in it.
- Modifying labels — to archive, move, trash, or schedule the return of messages, when you ask.
- Sending a message, only at your request — an unsubscribe request to a mailing list that publishes an unsubscribe address, or forwarding a message to an address you enter. mailsweep sends nothing else, and never sends without you asking.
- Your email address and name — to identify your account.
What we store
For each message we import, we store:
- Sender name and address, subject, and the short preview snippet Gmail provides
- Date received, size, read status, and which label or folder it is in
- Mailing-list identifiers and unsubscribe links, where the message has them
We do not read, request, or store the body of your emails, nor any attachments. Messages are fetched with Gmail's metadata format, which returns headers only. The one exception is the preview snippet, which Gmail includes with the headers and which may contain the first line or so of the message.
We also store your Google access and refresh tokens, encrypted with AES-256-GCM, so the app can act on your behalf without asking you to sign in repeatedly.
How your data is protected
- All traffic between you and mailsweep is encrypted with TLS.
- The connection between our servers and our database is encrypted with TLS and the database server's certificate is verified.
- Google tokens are encrypted at rest and are never written to logs.
- Your data is separated from other users' and is only reachable by your account.
Limited Use of Google user data
mailsweep's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically, we do not and will not:
- Sell your data, or transfer it to anyone except as needed to run the service
- Use it for advertising, or to build advertising profiles
- Use it to train generalised artificial intelligence or machine learning models
- Allow humans to read it, except with your explicit consent for a support request you have raised, where required by law, or where it is necessary for security
Who else processes your data
We use a small number of providers to run the service:
- Google — the source of your mail, via the Gmail API
- Supabase — managed PostgreSQL hosting for the database
- A virtual private server provider, which hosts the application itself
We do not sell or share your data with anyone else.
How long we keep it
Your data is kept while your account exists. When you delete your account, everything described above is removed from our database, and your Google authorisation is revoked so we can no longer access your mailbox.
Deleting your account
In the app, go to Settings → Account & Subscription → Delete account. This immediately and permanently:
- Revokes mailsweep's access to your Google Account
- Deletes your account, mailbox connections, stored message metadata, filter rules, scheduled actions and task history
It cannot be undone. You can also revoke access at any time from your Google Account permissions page.
Changes mailsweep made to your mailbox stay in Gmail. Archiving, moving and labelling are performed in your Gmail account itself, so deleting your mailsweep account does not put messages back where they were. Your mail is unaffected by the deletion.
Your rights
Depending on where you live, you may have rights to access, correct, export or erase your personal data, and to object to processing. The delete function above satisfies erasure. For anything else, write to contact@mailsweep.app.
Changes
If this policy changes materially, the date at the top will change and we will tell you in the app before the change takes effect.