Privacy Policy

This Privacy Policy explains how Mailer (“we”, “us”), operated by Exyno at mail.exyno.de, collects, uses, stores, and protects information when you use the Mailer web application (the “Service”). Mailer is an email client that lets you view and manage one or more Gmail accounts in a single interface.

1. Information we access

When you connect a Google account, you authorize Mailer through Google OAuth to access:

• Basic profile information — your email address and name, used to identify the connected account.
• Gmail messages and metadata — senders, recipients, subjects, dates, labels, message bodies, and attachment information, used to display your mail.
• Gmail modify and send permissions — used only to carry out actions you take, such as marking messages read or unread, starring, archiving, moving to trash, and sending or replying to email.

We do not access your Google contacts, calendar, Drive, or any other Google service.

2. How we use your information

We use Google user data solely to provide and improve the user-facing features of the Service:

• Displaying your messages from one or more accounts in a unified inbox.
• Keeping message state (read, starred, archived, deleted) in sync with Gmail.
• Sending email you compose, from the account you choose.
• Searching your messages within the Service.

3. Google API Services — Limited Use disclosure

Mailer's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide or improve user-facing features that are prominent in the Service.
• We do not transfer Google user data to third parties, except as necessary to provide the Service, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with notice to you.
• We do not use or transfer Google user data for serving advertisements, including retargeting, personalized, or interest-based advertising.
• We do not sell Google user data.
• We do not allow humans to read your data unless we have your affirmative agreement for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymized for internal operations.
• We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.

4. Storage and security

Messages and OAuth tokens are stored in a database on servers we control, located in the European Union. Access to the Service is protected by authentication, all traffic is encrypted in transit using TLS, and access to servers is restricted to the operator. OAuth tokens are used only by the Service to communicate with Google on your behalf.

5. Retention and deletion

• Message data is kept only as long as the corresponding account is connected to the Service.
• When you disconnect an account, its stored messages, tokens, and pending actions are deleted from our database.
• You can also revoke Mailer's access at any time from your Google Account at myaccount.google.com/permissions.
• To request deletion of all of your data, email privacy@exyno.de. We respond within 30 days.

6. Sharing

We do not sell, rent, or share your personal information or Google user data with third parties for their own purposes. Data is exchanged only with Google, as needed to operate the Service.

7. Cookies

We use only strictly necessary cookies to keep you signed in and to secure the Service. We do not use advertising or third-party tracking cookies.

8. Your rights

Depending on where you live, including under the EU General Data Protection Regulation (GDPR), you may have the right to access, correct, delete, restrict, or export your personal data, and to object to processing. To exercise these rights, contact privacy@exyno.de. You also have the right to lodge a complaint with your local data protection authority.

9. Children

The Service is not directed to children under 16, and we do not knowingly collect their data.

10. Changes

We may update this policy from time to time. Material changes will be reflected by the “Last updated” date above.

11. Contact

Questions about this policy can be sent to privacy@exyno.de.