Privacy policy
Last updated: October 20, 2026
1. Who we are
MailPilot is a web app that lets you read, send and manage messages in your own Gmail account. In this policy, "MailPilot", "we" and "us" mean the people who run MailPilot. You can reach us at official.mailpilot@gmail.com.
2. What we ask Google for
When you select Connect Gmail, Google shows you a consent screen. MailPilot asks for two permissions:
- Read, send and manage your email (
gmail.modify). We use this to show your messages in MailPilot, send the messages you write, and move messages to Trash when you tell us to. - See your email address (
userinfo.email). We use this to show which Gmail account is connected.
MailPilot does not have permission to delete messages permanently. When you delete a message in MailPilot, it moves to your Gmail Trash. You can restore it from Gmail, and Gmail empties the Trash automatically after 30 days.
MailPilot acts on your mailbox only when you use it. We do not read, send or delete anything on our own.
3. What information we handle
- Google account data: your Gmail address and the access tokens Google gives us so we can act on your behalf.
- Your messages: when you use MailPilot, we ask Gmail for the sender, subject, date, a short preview and the text of the messages you view, and pass them to your browser. We do not store the content of your messages on our server.
- What you write: the recipient address, subject and message you enter. This is passed to Gmail when you select Send.
- Sending records: the recipient, subject, status (sent or failed) and date and time of each message you send. These power the Recent activity list. We do not keep the body of the messages you send.
- Server logs: basic technical records such as request times and error messages, used to keep the service running and secure.
4. How we use it
We use your Gmail data only to provide the features you see in MailPilot: showing your messages, sending the messages you write, and moving messages to Trash when you ask. We also use information to show your sending records, keep the service secure, fix errors, and meet legal obligations.
We do not sell your data. We do not use Google user data for advertising. We do not use Google user data to train artificial intelligence or machine learning models.
5. Google API Services User Data Policy
MailPilot's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In line with those requirements, no person at MailPilot reads your Google user data unless you give us permission, it is needed to investigate abuse or a security problem, or the law requires it.
6. Who we share it with
Messages you send go to Google so Gmail can deliver them. We also use hosting and infrastructure providers to run the website, servers and storage. They process information only to operate MailPilot for us. We may disclose information if the law requires it. We do not share your information with anyone else.
7. Storage, security and retention
Access tokens are stored on our server and never in the code that runs in your browser. Your messages pass through our server to your browser over HTTPS and are not stored. We limit who can access stored data.
When you select Disconnect Gmail, we stop using your tokens and delete them. Sending records are kept until you ask us to delete them. Email us and we will delete them within 30 days.
No online service is completely secure, but we work to protect your information.
8. Your choices
- Disconnect Gmail at any time from the MailPilot workspace.
- Remove MailPilot's access from your Google Account at myaccount.google.com/permissions. This stops MailPilot from reading or sending email for you.
- Email us to ask for your sending records to be deleted.
Removing access in Google does not delete the sending records we hold. Contact us to have them deleted. Messages you moved to Trash stay in your Gmail Trash until you restore them or Gmail empties it.
9. Children
MailPilot is not meant for children under 13, and we do not knowingly collect information from them.
10. Changes to this policy
If we change this policy, we will update the date at the top. We will not use your Google user data in a way this policy does not describe without asking you first.
11. Contact
Questions or requests about your privacy? Email MailPilot Support.