Privacy Policy

Last updated: February 16, 2026

This Privacy Policy explains how SkillSync Email (the "Service", "we", "us") collects, uses, and shares information when you use our website and hosted API. If you self-host the open-source server, your deployment is controlled by you and this policy does not apply to your instance.

What the Service Does

The Service lets you create, list, update, and delete Gmail drafts through a Model Context Protocol (MCP) client. We request the Google Gmail scope gmail.compose and use the Gmail API only to manage drafts at your direction.

Information We Collect

• Waitlist and support information: If you join the beta waitlist or contact us, we collect the information you submit (for example, name, email, and company).
• Draft content you provide: When your MCP client calls the Service, we receive draft data such as recipient addresses, subject lines, and message bodies to create or update drafts.
• OAuth tokens and identifiers: We store OAuth access tokens and associated identifiers needed to authenticate requests to Gmail.
• Usage and log data: We may collect basic request metadata such as timestamps, IP address, and user agent to operate and secure the Service.

How We Use Information

• Provide the draft-management features you request.
• Authenticate requests and maintain secure sessions.
• Respond to inquiries and manage the beta waitlist.
• Monitor performance, prevent abuse, and improve the Service.

How We Share Information

• Google APIs: We send draft data to Google to create or update drafts in your Gmail account.
• Service providers: We use infrastructure and storage providers (for example, hosting and Redis) to run the Service.
• Waitlist provider: If you join the waitlist, your submission is processed by our form provider (Tally).
• Legal and safety: We may disclose information if required by law or to protect the Service and users.
• Business changes: Information may be transferred as part of a merger, acquisition, or asset sale.

Data Retention

We do not store email bodies or draft content. Draft data is processed transiently to fulfill your request and then sent to Gmail.

• OAuth tokens are stored in memory or Redis to authenticate requests and are removed when they expire, are revoked, or during routine cleanup.
• Waitlist and support information is retained until it is no longer needed or you request deletion.

Security

We use reasonable administrative and technical safeguards to protect information. No method of transmission or storage is 100% secure.

Your Choices

• Revoke Gmail access at any time in your Google Account permissions.
• Delete drafts directly in Gmail.
• Contact us to request deletion of waitlist or support information.

Google API Services

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Gmail data only to provide the draft-management features you request and do not use it for advertising or sell it to third parties.

International Transfers

We are based in the United States and may process information in the United States or other locations where our providers operate.

Children's Privacy

The Service is not intended for children under 13, and we do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above.

Contact Us

Questions or requests can be sent to [email protected].