Privacy Policy

Email Guard is an AI-powered productivity tool that helps you understand complex emails, communicate professionally, and reduce workplace stress. When you connect your Google account, Email Guard can help you organize, analyze, summarize, translate, and improve the tone of your emails, detect deadlines and tasks, generate replies, and manage your inbox.

Email Guard connects to your Gmail and Google Calendar through Google's official OAuth 2.0 authorization flow. You authorize access directly with Google, and Email Guard never collects or stores your Google password. The permissions requested are limited to what the app's features require:

• Gmail — read: view your inbox, messages, and labels.
• Gmail — send: send, reply, reply all, and forward emails on your behalf.
• Google Calendar — read: view upcoming events for the calendar widget.

Email Guard does not request permission to permanently delete your emails, manage your contacts, or access other Google services. You can review the exact permissions on Google's consent screen before authorizing.

Your Gmail and Calendar data is accessed only to provide the features you request, including:

• Displaying your inbox and reading individual messages.
• Email organization and declutter assistance (keep / archive / delete suggestions).
• AI-powered summarization, analysis, and action-item extraction.
• Tone analysis and professional rewrite suggestions.
• Translation of incoming and outgoing emails.
• Reply generation and reply detection.
• Deadline and task (checklist) detection from email content.
• Sending, replying to, and forwarding emails on your behalf.

When you open your inbox or a message, Email Guard fetches it live from Gmail using your access token, displays it, and discards it. Raw email messages are not stored in Email Guard's database.

When you choose to analyze, summarize, translate, or generate a reply for an email, the email's subject and body text are sent to an AI language model (via the Base44 platform) to produce the requested result. Here is what you should know:

• Only the email you explicitly select is processed — not your entire mailbox.
• No OAuth tokens, passwords, or account credentials are sent to the AI provider.
• Processing happens server-side; your browser does not contact the AI provider directly.
• Data retention by the AI provider is not guaranteed. Email Guard cannot guarantee that the AI provider does not retain inputs. If your organization requires a zero-retention guarantee, please contact us before enabling AI features.

Email contents are only stored when you choose to save an analysis. When you analyze an email, the following may be saved to your private record:

• The email subject and body text you analyzed.
• The AI-generated summary, action items, tone analysis, and scores.
• Generated replies you choose to save.
• Internal reminders you create from detected deadlines.

Drafts (emails you are composing but have not sent) are saved in your browser's local storage only — not on Email Guard's servers — so they survive page reloads but never leave your device.

Security-related events (such as connections, disconnections, sends, and rate-limit hits) are logged with non-sensitive metadata only. Email content, OAuth tokens, and passwords are never logged.

You are in control of your data and can delete it at any time:

• Delete All History: Settings → Privacy & Security → Delete All History permanently removes all of your saved analyses.
• The History page lets you delete individual analyses.
• Internal reminders can be managed and deleted independently.
• Disconnecting Gmail revokes the OAuth grant and removes stored tokens — Email Guard immediately loses all access to your mailbox.

Once you delete your data, it cannot be recovered.

You can revoke Email Guard's access to your Google account at any time from your Google Account settings:

• Visit myaccount.google.com → Security → Third-party apps with account access.
• Select Email Guard and click "Remove access".

You can also disconnect from within Email Guard's settings, which revokes the OAuth grant on the server side.

• Encryption in transit: all traffic uses HTTPS/TLS.
• User data isolation: every request is authenticated on the backend; you can only access your own Gmail data using your own token. One user cannot access another user's emails, drafts, or analyses.
• Audit logging: security events are logged with non-sensitive metadata. Email content, tokens, and passwords are never logged.
• Rate limiting: sending is capped per user per hour; AI analysis has a daily limit.
• Input validation: all inputs are validated; email HTML is stripped to plain text before rendering to prevent script injection.

Email Guard has not completed formal security certifications (such as SOC 2, ISO 27001, or HIPAA). This policy does not claim any certification that has not been achieved.

Email Guard does not sell your personal information to anyone. We do not use your email content for advertising purposes.

To operate Email Guard, your data is processed by the following categories of service providers:

• Google: provides Gmail and Google Calendar access through OAuth 2.0, subject to Google's own privacy practices.
• Base44 platform: hosts the application, its database, and the AI language model integration used for analysis, translation, and reply generation.

These providers process data only as necessary to deliver the features you request. Email Guard does not share your email content with any other third parties.

You have the following rights regarding your data:

• Access: you can view your saved analyses and reminders within the app.
• Deletion: you can delete individual analyses or all history at any time.
• Revocation: you can revoke Google account access at any time.
• Choice: email content is only stored when you choose to save an analysis; you may use the app without saving anything.

If you have any questions or concerns about this Privacy Policy or how your data is handled, please contact us at dorukhsari@gmail.com.