Privacy Policy

Last updated: 14 June 2026

MailSweep is a Gmail sidebar add-on that helps you bulk-delete emails matching filters you choose. This page explains exactly what data MailSweep touches, what it stores, and what it does not.

1. Who runs MailSweep

MailSweep is operated by an independent developer based in India. References to "we," "us," and "our" in this policy mean the developer of MailSweep. Contact details are at the bottom of this page.

2. What MailSweep can access

When you install MailSweep, Google asks you to grant the following OAuth scopes:

• gmail.modify — search your mailbox and move messages to Trash.
• gmail.addons.execute — run as a Gmail sidebar add-on.
• script.scriptapp — create scheduled triggers so recurring sweeps and long-running deletes can continue in the background.
• script.external_request — make HTTPS calls to our paywall validation service (described below).
• userinfo.email — read your Gmail address so MailSweep can recognize your paid status.

MailSweep uses these scopes only for the features it advertises. It does not read, store, transmit, or share the contents of your emails.

3. What MailSweep does with your data

3.1 Email content

During a sweep, MailSweep asks the Gmail API for the IDs of messages that match your filters and then asks Gmail to move those messages to Trash in bulk. For the sender-breakdown feature, MailSweep additionally reads the From header (and only the From header) of a sample of matching messages so it can group them by sender domain.

No part of an email — subject, body, attachments, recipient list, headers other than From — is ever copied off your Google account. Nothing is transmitted to our servers or any third party.

3.2 Account data stored on our servers

For paywall enforcement, MailSweep stores the following on a Supabase database we operate:

• Your Gmail address (used as your license identifier).
• The dates of your first use and most recent sweep (to enforce the 3-day free trial).
• A boolean indicating whether you have purchased a lifetime license.
• A boolean indicating whether your trial has expired.

That's the complete list. We do not store names, IP addresses, device info, analytics events, email content, or sender details.

3.3 Data stored inside your own Google account

Recurring-sweep recipes (their names, filters, cadences, and run statistics) are stored in your own Apps Script UserProperties — meaning they live inside your Google account on Google's servers, not ours. We cannot see them. Uninstalling the add-on removes that data.

4. Payments

Payments are processed by Gumroad. When you buy MailSweep, Gumroad collects your billing details, processes your card, and sends us a webhook telling us which Gmail address paid. We receive only your Gmail address from that webhook — no card details, no name, no billing address. Gumroad's own privacy policy governs the data they collect from you during checkout.

5. Third-party services we use

• Google Workspace APIs — to read message metadata and move messages to Trash, on your behalf, when you trigger a sweep.
• Supabase — to host the small users table described above and the paywall-check edge function.
• Gumroad — to process payments and send us notification of successful purchases.

We do not use Google Analytics, Mixpanel, Sentry, Facebook Pixel, or any other tracking or telemetry service. There is no advertising network involved at any layer.

6. Limited Use compliance

MailSweep's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer Google user data to third parties except as necessary to provide or improve MailSweep itself, and we do not use Google user data for advertising or for human-readable review except with your explicit consent for support purposes.

7. Data retention

Your account record persists in our database for as long as the add-on is installed on your Gmail account, plus a reasonable window afterwards to handle refunds and chargebacks. You can request deletion at any time by emailing us (see Contact below); we will erase your record within seven days.

8. Children

MailSweep is not directed at children under 13 and does not knowingly collect information about them.

9. Changes to this policy

If we update this policy in a way that materially affects how data is handled, we will update the "Last updated" date at the top and, for existing users, surface the change inside the add-on the next time you open it.