Privacy Policy

Last updated: 7 July 2026

MailSweep is a Gmail sidebar add-on that helps you bulk-delete emails matching filters you choose. This page explains exactly what data MailSweep touches, what it stores, and what it does not.

1. Who runs MailSweep

MailSweep is operated by an independent developer based in India. References to "we," "us," and "our" in this policy mean the developer of MailSweep. Contact details are at the bottom of this page.

2. What MailSweep can access

When you install MailSweep, Google asks you to grant the following OAuth scopes:

• gmail.modify — search your mailbox and move messages to Trash.
• gmail.addons.execute — run as a Gmail sidebar add-on.
• script.scriptapp — create scheduled triggers so recurring sweeps and long-running deletes can continue in the background.
• script.external_request — make HTTPS calls to our paywall validation service (described below).
• userinfo.email — read your Gmail address so MailSweep can recognize your paid status.

MailSweep uses these scopes only for the features it advertises. It does not read, store, transmit, or share the contents of your emails.

3. What MailSweep does with your data

3.1 Email content

During a sweep, MailSweep asks the Gmail API for the IDs of messages that match your filters and then asks Gmail to move those messages to Trash in bulk. For the sender-breakdown feature, MailSweep additionally reads the From header (and only the From header) of a sample of matching messages so it can group them by sender domain.

No part of an email — subject, body, attachments, recipient list, headers other than From — is ever copied off your Google account. Nothing is transmitted to our servers or any third party.

3.2 Account data stored on our servers

For paywall enforcement, MailSweep stores the following on a Supabase database we operate:

• Your Gmail address (used as your license identifier).
• The dates of your first use and most recent sweep (to enforce the 3-day free trial).
• A boolean indicating whether you have purchased a lifetime license.
• A boolean indicating whether your trial has expired.

That's the complete list. We do not store names, IP addresses, device info, analytics events, email content, or sender details.

3.3 Data stored inside your own Google account

Recurring-sweep recipes (their names, filters, cadences, and run statistics) are stored in your own Apps Script UserProperties — meaning they live inside your Google account on Google's servers, not ours. We cannot see them. Uninstalling the add-on removes that data.

4. Payments

Payments are processed by Gumroad. When you buy MailSweep, Gumroad collects your billing details, processes your card, and sends us a webhook telling us which Gmail address paid. We receive only your Gmail address from that webhook — no card details, no name, no billing address. Gumroad's own privacy policy governs the data they collect from you during checkout.

5. Third-party services we use

• Google Workspace APIs — to read message metadata and move messages to Trash, on your behalf, when you trigger a sweep.
• Supabase — to host the small users table described above and the paywall-check edge function.
• Gumroad — to process payments and send us notification of successful purchases.

We do not use Google Analytics, Mixpanel, Sentry, Facebook Pixel, or any other tracking or telemetry service. There is no advertising network involved at any layer.

6. How we protect your data

MailSweep is designed to protect sensitive data — including the Gmail data covered by the gmail.modify scope — through the following mechanisms:

• Data minimization for sensitive Gmail data. Sensitive Gmail data — message content, subjects, bodies, attachments, and recipient lists — is never copied off your Google account, never stored, and never transmitted to our servers or any third party. All processing of Gmail data happens inside Google Apps Script, which runs on Google's own infrastructure. Because this sensitive data never leaves Google's systems, it is never exposed to any environment we operate.
• Encryption in transit. Every network request MailSweep makes — Gmail API calls, the license-validation call to our backend, and the payment webhook — is transmitted over HTTPS/TLS. No data is ever sent in plaintext.
• Encryption at rest. The limited account data we store (your Gmail address and license/trial status flags, as listed in section 3.2) is held in a Supabase-hosted PostgreSQL database that encrypts stored data at rest using AES-256.
• Access controls. The account-data table is protected by PostgreSQL Row-Level Security and is reachable only by our server-side validation function, which authenticates with a secret service-role key. The public/anonymous key cannot read, modify, or delete any row. All application secrets (database keys and service URLs) are stored in Google Apps Script Script Properties — never in client-visible code or in our public source repository.
• No human access to Gmail data. We have no technical means to read your Gmail messages, and we never do. The only account data a human on our side could view is your Gmail address and paid/trial status, and only for legitimate support requests or for investigating security abuse.
• Deletion on request. You may have your stored account record erased at any time (see Data retention and Contact below), which removes the only sensitive identifier we hold — your Gmail address.

7. Limited Use compliance

MailSweep's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as necessary to provide or improve MailSweep itself, and we do not use Google user data for advertising or for human-readable review except with your explicit consent for support purposes.

8. Data retention

Your account record persists in our database for as long as the add-on is installed on your Gmail account, plus a reasonable window afterwards to handle refunds and chargebacks. You can request deletion at any time by emailing us (see Contact below); we will erase your record within seven days.

9. Children

MailSweep is not directed at children under 13 and does not knowingly collect information about them.

10. Changes to this policy

If we update this policy in a way that materially affects how data is handled, we will update the "Last updated" date at the top and, for existing users, surface the change inside the add-on the next time you open it.