Privacy

Privacy policy

Effective date: October 5, 2026

Andrew Mail Bridge is a personal Gmail integration operated by its account owner. Contact: andrewtry777@gmail.com.

Information accessed

After Google authorization, Gmail read-only access permits reading message bodies, headers, labels, settings and attachments. Gmail compose access permits managing drafts and sending email. The intended features are reading messages and creating drafts at the owner’s request.

Use of information

Selected email content is used to answer the owner’s mail-related requests and prepare drafts. Drafts are saved in Gmail for review. Sending requires a separate instruction from the owner.

Service providers and AI processing

The owner may select Anthropic Claude or ChatGPT/OpenAI to process relevant email content and generate draft text. Relevant message content and instructions may therefore be transmitted to the selected provider. Provider processing and retention depend on the service and account settings used; the owner must configure those settings before connecting Gmail.

Supabase is used to store the OAuth client secret securely in Vault and is the intended backend for the connection. Cloudflare hosts these informational pages.

Storage and retention

The intended integration does not keep persistent copies of email messages outside Gmail. Email content is processed as needed for the requested task, and created drafts remain in Gmail. OAuth credentials and any future authorization tokens are stored separately for the duration of the connection. AI-provider retention is governed by the selected service’s settings and policies.

Google API data use

Andrew Mail Bridge’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Google user data must not be used for advertising, sold, or used to train generalized AI models. The integration and selected provider settings must enforce these restrictions before Gmail processing is enabled.

Control and deletion

The owner can revoke access using their Google Account connections settings. Revoking access stops future authorized requests; drafts already saved remain in Gmail until the owner deletes them there. Contact the operator to remove stored authorization tokens or address any privacy request.

Current status

The Gmail connection is being configured. This informational website does not itself access email or collect OAuth credentials. This policy will be updated before any material change to processing or retention.