Privacy Policy — MailFlow

    Short version: MailFlow uses your Gmail access only to send emails you initiate. We never read your inbox, store email content beyond what you create, or sell your data.
  

1Who we are

MailFlow is a Gmail-based email campaign tool at mailsendertool.online. Contact us at mudassarmoazzam419@gmail.com.

2What data we collect

When you sign in with Google we receive and store:

Your Google account email address and display name
Your Google profile picture URL
OAuth access and refresh tokens, encrypted at rest with AES-256

We also store campaign data you create: recipient lists, email subjects, and body content — solely to run your campaigns.

3How we use Gmail access

We request the following Google API scopes:

gmail.send — to send emails from your Gmail when you run a campaign
gmail.readonly — to verify your account is accessible
userinfo.email / userinfo.profile / openid — to identify you in the app

We use Gmail access only to carry out sending actions you explicitly initiate. We never read, index, scan, or store your inbox contents.

Our use of Google user data complies with the Google API Services User Data Policy, including Limited Use requirements.

4Data sharing

We do not sell, rent, or share your personal data or Gmail data with any third parties, advertisers, or data brokers. Your data is never used to train AI or ML models.

5Data retention

Your data is retained as long as your account exists. You can delete your account anytime from Settings — this permanently removes all tokens, campaigns, and logs, and revokes our OAuth access.

6Security

OAuth tokens are encrypted with AES-256 before storage. Sessions use secure, HTTP-only cookies. All data in transit is protected by HTTPS.

7Your rights

Revoke MailFlow's access at any time via Google Account Permissions
Delete your account and all data from Settings → Delete Account
Request a copy of your data by emailing mudassarmoazzam419@gmail.com

8Cookies

We use a single session cookie (mailflow_sid) — HTTP-only, secure, expires after 7 days of inactivity. No tracking or advertising cookies.

9Children's privacy

This app is not directed at children under 13. We do not knowingly collect data from anyone under 13.

10Changes

If we make material changes we will update the date above. Continued use constitutes acceptance.

11Contact

Questions: mudassarmoazzam419@gmail.com