Privacy Policy

When you sign in with Google, we request only the permissions needed to operate the product:

• Basic profile and email address — your name, email address, and profile image, used to identify your account.
• Gmail read access (gmail.readonly) — to fetch recent messages so we can display your inbox, generate summaries, and prepare draft replies.
• Gmail send access (gmail.send) — to send replies that you explicitly review and approve.
• Gmail manage access (gmail.modify) — to organize your inbox on your behalf when you ask us to: archiving messages, moving mail to Trash, and triggering one-click unsubscribe requests. We only take these actions on senders or messages you explicitly approve, and we never permanently delete mail (items moved to Trash remain recoverable in Gmail for 30 days).

We do not request access to your contacts, files, calendar, or any Google data beyond what is listed above.

• Display your recent emails inside the Paddock Mail interface.
• Generate concise digests and suggested replies using an AI model. Only the minimum content needed (such as sender, subject, and message snippets) is processed to create these summaries and drafts.
• Send replies that you have reviewed and approved.
• Analyze your inbox to identify newsletters, marketing lists, and other bulk senders so we can show you what is filling your inbox and which senders you can unsubscribe from.
• When you approve it, unsubscribe from senders and archive or move their messages to Trash to clean up your inbox.

We do not use your Gmail data for advertising, and we do not sell your data to anyone.

Paddock Mail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data to provide and improve the user-facing features of Paddock Mail, and we do not transfer or use this data for serving ads, or for any purpose unrelated to the features you interact with.

To create digests and draft replies, relevant email content is sent to a third-party AI model provider through the Vercel AI Gateway. This content is processed only to generate the requested output and is not used to train models. We send the smallest amount of content necessary to produce a useful result.

Paddock Mail is designed to minimize stored data, and we do not store the bodies or full contents of your emails. Your Google access and refresh tokens are kept in an encrypted session associated with your browser so the app can act on your behalf during your session.

To power inbox analysis and the unsubscribe tools, we store a limited amount of email metadata in our database, including sender names and addresses, subjects, short snippets, message and thread identifiers, dates, and unsubscribe-header information. We also store the categories we derive, your unsubscribe and keep decisions, and a log of the archive, delete, and unsubscribe actions taken on your behalf. This lets us show your inbox report and avoid re-prompting you about senders you have already handled.

You can clear this stored metadata at any time by revoking access (see below) or by contacting us at the email address listed in this policy, and we will delete the data associated with your account.

We share information only in these limited circumstances:

• Service providers — infrastructure and AI processing partners (such as our hosting provider and AI model provider) who process data on our behalf under appropriate confidentiality obligations.
• Legal requirements — when required to comply with applicable law or a valid legal request.

We never sell your personal information.

We use industry-standard measures to protect your information, including encrypted connections (HTTPS) and encrypted session tokens. No method of transmission or storage is completely secure, but we work to protect your data using reasonable safeguards.

You can revoke Paddock Mail's access to your Google account at any time from your Google Account permissions page. Revoking access immediately stops Paddock Mail from reading, sending, or managing mail on your behalf. You may also stop using the app at any time by signing out.

Paddock Mail is not intended for use by individuals under the age of 18, and we do not knowingly collect information from children.

We may update this Privacy Policy from time to time. When we do, we will revise the effective date at the top of this page. Continued use of Paddock Mail after changes take effect constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or how your data is handled, contact us at privacy@paddockmail.com.