1. Introduction
Forestmail ("we," "us," or "our") provides an AI-powered email classification and management service (the "Service"). This Privacy Policy explains how we collect, use, store, and protect your information when you use our Service, including data obtained through Google APIs.
Forestmail's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
2. Information We Collect
2.1 Account Information
When you sign up, we collect:
- Name and email address via Google OAuth 2.0 Sign-In
- Profile picture URL for display purposes
2.2 Gmail Data (via Google API)
When you connect a Gmail account, we access the following data based on the OAuth scopes you authorize:
| Scope | Data Accessed | Purpose |
|---|---|---|
userinfo.email | Your primary email address | Identify your linked account |
userinfo.profile | Your name and profile picture | Display your identity within the app |
gmail.readonly | Email messages, threads, metadata, and attachments | Sync, classify, and display your emails |
gmail.settings.basic | Gmail labels and filters | Create and manage email filters |
mail.google.com | Full mailbox access | Send emails, reply, modify labels, and permanently delete messages |
For a complete breakdown of every Gmail action and its required scope, see our Gmail Privacy Access page.
2.3 Derived Data
We generate the following data from your emails:
- AI-generated classifications (e.g., important, promotional, spam) using a large language model
- Sender analytics (volume, category distribution) for reporting
- Daily/weekly email reports summarizing inbox activity
2.4 Payment Information
Billing is processed through Dodopayments. We do not store your credit card details. Dodopayments handles all payment data under their own privacy policy.
3. How We Use Your Data
We use the data collected exclusively to provide and improve the Service:
| Use Case | Description |
|---|---|
| Email Classification | AI categorizes incoming emails into categories |
| Inbox Management | Display, search, and organize your email threads |
| Email Actions | Mark as read/unread, star, archive, trash, spam, and delete at your explicit request |
| Compose & Reply | Send new emails and reply to threads on your behalf |
| Reports & Analytics | Generate email activity reports and sender statistics |
| Filter Management | Create and manage Gmail filters for email automation |
We do NOT use your data for:
- Advertising, retargeting, or interest-based profiling
- Selling or transferring to third parties, data brokers, or information resellers
- Determining credit-worthiness or for lending purposes
- Training AI/ML models on your personal email content
- Any purpose unrelated to the core Service functionality
4. Google API Services – Limited Use Disclosure
Our use of data obtained through Google Restricted and Sensitive scopes is limited to providing or improving user-facing features that are prominent in the Forestmail application. Specifically:
- Limited Use: We only use Gmail data to power the features described in Section 3 above. Data usage is strictly limited to providing or improving user-facing features visible in the application.
- No Transfers: We do not transfer Gmail data to third parties, except to provide or improve user-facing features (with your consent), for security purposes, to comply with applicable laws, or as part of a merger/acquisition with your explicit consent.
- No Human Access: We do not allow humans to read your Gmail data unless you have given explicit consent, it is necessary for security purposes, it is required by law, or the data is aggregated and anonymized for internal operations.
- No Advertising: We do not use Gmail data for serving ads, retargeting, personalized advertising, or interest-based advertising.
5. Data Storage and Security
5.1 What We Store
- Email metadata: Subject, sender, receiver, timestamps, labels, read/star status, thread IDs, and message IDs
- Email body content: Stored to enable classification, display, and reporting
- OAuth refresh tokens: Encrypted and stored securely to maintain persistent access
- Derived classifications and reports: AI-generated labels and periodic summary reports
5.2 Where We Store It
- All data is stored on secure servers hosted on Amazon Web Services (AWS)
- Database is hosted on MongoDB Atlas with encryption at rest
5.3 Security Measures
- All data is transmitted over HTTPS/TLS (encrypted in transit)
- OAuth tokens are stored securely and are never exposed to the frontend
- Access is authenticated via JWT tokens with role-based access control
- We follow industry best practices for secure application development
6. Data Sharing
We do not sell, rent, or share your personal data or Gmail data with any third parties except:
- Google APIs – Email access and management
- Dodopayments – Payment processing
- MongoDB Atlas – Database hosting
- AWS EC2 – Application hosting
- Vercel – Frontend hosting and analytics
- AI Provider – Email classification (no data is retained by the provider)
7. Data Retention and Deletion
- Active accounts: Your data is retained as long as your account is active.
- Account disconnection: When you disconnect a Gmail account, we delete the associated email data, tokens, and derived data.
- Account deletion: All associated data will be permanently deleted within 30 days.
- Right to delete: You may request deletion at any time by contacting us.
8. Your Rights
You have the right to:
- Access the data we hold about you
- Revoke Gmail access at any time via Google Account Permissions
- Delete your account and all associated data
- Export your data upon request
- Withdraw consent for data processing at any time
9. Children's Privacy
Forestmail is not directed to children under the age of 13. We do not knowingly collect personal information from children.
10. Changes to This Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you via in-app notification or email before the changes take effect.
11. Contact Us
If you have questions or concerns about this Privacy Policy, please contact us at: [email protected]