Privacy Policy

Connect My Email ("we," "us," "our," or "Company") respects your privacy and is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard information when you use our email connector, MCP, API, inbox-cleanup, and related services.

Please read this privacy policy carefully. By accessing or using Connect My Email, you acknowledge that you have read, understood, and agree to be bound by all of the terms of this privacy policy.

To provide our service, we require one of the following depending on your email provider:

• OAuth Tokens: Secure delegated access tokens for supported OAuth email providers (no provider password stored)
• App Passwords: Secure app-specific passwords for iCloud, Yahoo, Fastmail, ProtonMail, and generic IMAP providers (not your main account password)
• Email Address: The email address associated with your account
• IMAP Server Details: Server address and port information for email access

We do not maintain a secondary archive of your inbox. We process message content when needed to fulfill your request. Email metadata may be indexed for search and cleanup, and content may be retained when a user-requested feature requires it, such as drafts, scheduled sends, or attachment processing.

• Connect My Email account and user identifiers
• Email provider type (Gmail, Outlook, Yahoo, etc.)
• Account creation and last access timestamp
• Usage statistics (number of emails accessed, API calls made)

• Log Data: IP addresses, browser type, pages visited, time of access
• Device Information: Device type, operating system, unique identifiers
• Usage Analytics: How you interact with our service (anonymized)

We use collected information for:

• Service Delivery: Connecting your email to Claude and enabling email reading/management features
• Security: Detecting fraud, preventing abuse, and protecting your account
• Improvement: Analyzing usage patterns to improve service reliability and features
• Support: Responding to your inquiries and technical issues
• Compliance: Meeting legal obligations and enforcing our terms
• Communication: Sending service updates and security notices (only when necessary)

4.1 Encryption Standards

Your email credentials are protected with:

• AES-256 Encryption: Industry-standard encryption for stored credentials
• TLS: Secure transmission over HTTPS and provider connections
• Application-Layer Protection: Credentials are decrypted only by authorized services when needed to access your email

4.2 Access Controls

• Credentials are encrypted before being written to durable storage or cache
• Only authorized backend services can decrypt credentials
• Credential operations use authenticated, restricted service paths
• Production access is limited to authorized personnel and services

4.3 Security Measures

• Code review, dependency review, and automated security tests
• Rate limiting and abuse prevention
• Restricted production access and audit logging

Your email content remains your property.

• Message content is processed when needed to perform a request or user-enabled feature
• Email metadata (including sender, subject, date, folder, and identifiers) may be indexed for search, reporting, and cleanup
• Content may be retained for user-requested features such as drafts, scheduled sends, attachment processing, or support, subject to the applicable feature and retention period
• Content sent to an AI provider is governed by the provider and account you choose
• You can revoke access at any time through your email provider settings

We do not sell, trade, or rent your personal information.

We may share information only:

• With Your Chosen AI Provider: When you direct your AI client or provider to access email through the Service, subject to that provider's terms
• With Service Providers: Third parties who assist us (payment processors, hosting providers) under strict confidentiality agreements
• For Legal Reasons: When required by law, court order, or government request (we will notify you when legally permitted)
• To Protect Rights: When necessary to prevent fraud, protect security, or defend against legal claims

• Account Data: Retained while your account is active
• Credentials: Retained until you revoke access
• Logs: Retained for 90 days for security and debugging purposes
• Usage Analytics: Aggregated data retained indefinitely; personally identifiable data deleted after 30 days

Upon account deletion, all associated data is permanently removed within 30 days, except where legally required to retain it.

You have the right to:

• Access: Request a copy of your personal data we hold
• Correction: Correct inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Revoke Access: Disconnect your email at any time through your account settings
• Data Portability: Request your data in a portable format
• Opt-Out: Disable optional analytics and marketing communications

To exercise these rights, contact us at privacy@connectmyemail.com.

Our service interacts with:

• Email Providers: Gmail, Yahoo, iCloud, Fastmail, ProtonMail (via OAuth and IMAP protocols) (Outlook coming soon)
• AI Providers and Clients: Your use of Claude, ChatGPT, Cursor, or another AI client is subject to that provider's terms and privacy policy
• Hosting Providers: Infrastructure and database services

We are not responsible for the privacy practices of third-party services. Please review their privacy policies.

GDPR (EU/EEA Users): We comply with the General Data Protection Regulation. Your data is processed lawfully based on consent and legitimate business interests.

CCPA (California Users): You have rights to know, delete, and opt-out of data sales (though we don't sell data).

Data Transfers: Data may be processed in the United States and other jurisdictions. By using our service, you consent to such transfers.

Connect My Email is not intended for users under 13 years old. We do not knowingly collect data from children. If we become aware of such collection, we will delete it immediately.

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the "Last updated" date. Your continued use of the service constitutes acceptance of the updated policy.

If you have questions about this privacy policy or our privacy practices:

• Email: privacy@connectmyemail.com
• Website: connectmyemail.com