Your email, handled carefully

What we access

We request the narrowest permissions that make the product work, from whichever provider you connect:

We deliberately do not request gmail.modify or full-mail access. That means MailRadar is technically incapable of deleting, archiving or relabelling your Gmail, not merely unwilling. “Clean my inbox” hides threads inside MailRadar only.

Limited use of Google data

MailRadar’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: your Gmail data is used only to provide the features on this page, it is never sold, never used for advertising, never used to train any AI model, and no human at MailRadar reads it except with your explicit permission to fix a problem you have reported.

What we analyse

• Message text, sender, recipients and timestamps, to detect requests, promises and deadlines.
• Thread structure, who wrote last, and how long it has been quiet.
• Your sent mail, to learn your writing style, so drafts sound like you.

Most analysis runs on our own servers with no external calls. A thread is only sent to an AI provider when the local engine cannot settle an ambiguous case, and never when its content is unchanged since the last analysis.

What we never do

How it is stored

• OAuth tokens are encrypted at rest with AES-256-GCM. They are never logged and never sent to the browser.
• Message bodies are stored as plain text so analysis can run incrementally, never as raw HTML, and never with tracking pixels.
• Product analytics live in a separate table that contains no message content: an event records that an analysis happened, its cost, and nothing else.
• Sessions are a signed, httpOnly cookie holding your user id and when it was issued, and nothing else.

Leaving

Settings has two buttons. Disconnect removes the mailbox link and deletes the cached copy of your mail. Delete everything erases your account, threads, analyses, tasks and writing profile.

Both take effect immediately. There is no soft delete and no retention window. You can also revoke access at any time from your Google account security settings, independently of us.

Sub-processors

When an AI provider is configured, thread excerpts may be sent to it to improve a summary. Providers are used under agreements that prohibit training on the data. If no provider is configured, no email content leaves the server at all. Data is hosted on Vercel and in a Postgres database in Frankfurt, inside the EU. If paid plans are switched on, payment is handled by Stripe, which never receives email content, and we never see card details.

Who is responsible for your data

MailRadar is operated by the company below, which is the data controller for everything described on this page. Questions, complaints and requests about your data go to it, and so does any complaint you would rather take to a supervisory authority, which in Sweden is Integritetsskyddsmyndigheten.

Contact

Questions, complaints and requests for your data go to privacy@mailradar.se. That includes asking us to delete everything, though the button in Settings does it faster.