Privacy Policy

Effective October 14, 2026

What is Snailmail?

Snailmail is an AI-powered email cleanup tool that connects to your Gmail account via OAuth. It automatically identifies unwanted newsletters and marketing emails, unsubscribes from them, and applies labels to keep your inbox organized.

Snailmail is operated by Jeffrey Mailey. If you have any questions about this policy, you can reach us at support@getsnailmail.app.

What data we collect

When you use Snailmail, we collect and store the following:

• Account details: your email address and, if you sign in with Apple and share it, your name. Used to create and identify your Snailmail account.
• Gmail message metadata: sender address and name, subject line, the short preview snippet Gmail shows, message headers, and the unsubscribe link. We store this for the senders Gary flags or unsubscribes from, so you can review and reverse his decisions.
• Orders and receipts: from order confirmation and shipping emails, Gary pulls out the merchant, order number, status, total, item summary, tracking number, and carrier, and stores them so your Shell can show them.
• Attachment details: file name, type, size, sender, and subject for attachments in your inbox, so you can find documents. We never download or store the files themselves.
• Storage figures: how much space your mail uses, by sender and by category, so you can see what to clear.
• OAuth tokens: stored encrypted in our database so Snailmail can access your Gmail on your behalf.
• Subscription status: whether your plan is active, from Stripe on the web or the App Store on iPhone. We never see your card number.

What Gary reads

To decide whether a message is junk, Gary reads it the way a person would skim it: the sender, the subject, the preview snippet, the first part of the message text (about the first 1,000 characters), and the structure of the HTML (unsubscribe links, tracking images). This happens in memory while a scan runs. We do not store message bodies.

Two jobs use an AI model (Anthropic's Claude): reading order and shipping emails to pull out the order details above, and, when enabled, helping classify borderline junk. The message content is sent to the model for that single task and is not used to train it. We never send your mail to any other third party.

What Gary does in your Gmail

• Applies labels (such as "Gary-Scanned" and "Gary-Unsubscribed") so you can see what was processed, and moves junk out of your inbox (archive).
• Sends unsubscribe requests on your behalf. That is the only email Snailmail ever sends. It never composes or sends any other mail, never emails your contacts, and never replies on your behalf.
• Moves mail to Trash in two cases: junk Gary ate, 30 days after he ate it, and anything you choose to clear in Storage. Gmail empties Trash after another 30 days, so there is always a window to recover something.

Gmail scopes we use

When you connect your Gmail account, Snailmail requests a single Gmail permission, plus basic sign-in information:

• gmail.modify: Google's consent screen labels this "Read, compose, and send." Snailmail uses it to read messages to detect junk and find orders, move unwanted mail out of your inbox, apply labels, and move mail to Trash as described above. The only message it ever sends is an unsubscribe request on your behalf.
• openid and userinfo.email: to identify which Google account you connected.

Snailmail's use of Google user data follows the Google API Services User Data Policy, including the Limited Use requirements.

What we do NOT do

To be completely clear:

• We do not store the bodies of your emails
• We do not sell, share, or transfer your data to third parties, and we do not use it to train AI models
• We do not use your Gmail data for advertising, and we run no ads, analytics trackers, or ad pixels

Data storage and security

Your data is stored in Supabase (PostgreSQL) with row-level security enabled, hosted in the United States. OAuth tokens are stored encrypted. Only your account can access your own data.

Data retention

Gmail tokens and flagged email metadata are retained while your account is active. You can delete all of your data at any time by disconnecting your Gmail account or deleting your Snailmail account entirely.

Revoking access

You can revoke Snailmail's access to your Gmail at any time by:

• Disconnecting Gmail from the Snailmail dashboard
• Removing Snailmail from your Google Account permissions

Cookies

Snailmail only uses Supabase authentication session cookies to keep you logged in. We do not use tracking cookies, analytics cookies, or any third-party cookies.

Google API Services disclosure

Changes to this policy

If we make significant changes to this privacy policy, we'll notify you by email or through the Snailmail dashboard. Minor updates will be reflected by updating the effective date at the top of this page.

Contact

Questions or concerns? Reach out at support@getsnailmail.app.