1. Introduction
Mail Track ("we", "our", or "us"), available at https://mail-track-pink.vercel.app and https://www.mailtrack.in, operates the Mail Track web dashboard and the Mail Track browser extensions for Gmail.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you access our application and services. We are firmly committed to user privacy, data minimization, and total transparency regarding our use of Google OAuth and the Gmail API.
2. Information We Collect
We only collect the minimum information required to deliver email tracking and mobile checkmark receipts:
| Data Category | Specific Data Collected | Purpose |
|---|---|---|
| Account Profile | Google account ID, email address, display name, avatar URL | User authentication, account identification, and generating your personal API key. |
| Tracking Metadata | Email subject line, recipient email address, date/time sent, Gmail thread ID | Listing your sent emails in the dashboard and finding the corresponding email thread in Gmail to apply labels. |
| Read & Click Telemetry | Open timestamp, click timestamp, recipient user-agent (device/browser), approximate IP geolocation (city/country level) | Alerting you in real time when your recipient reads your email or clicks a tracked link. |
| OAuth Credentials | Encrypted OAuth access token, encrypted refresh token, and token expiration timestamp | Authorizing background API calls to Gmail to add and update "✓" and "✓✓" labels on your sent threads. |
3. Information We Never Collect
To preserve your total communication privacy:
- We NEVER read, capture, or store the text body, message contents, or attachments of your emails.
- We NEVER access your personal contact lists, inbox emails, drafts, or trash.
- We NEVER inject external advertising scripts or track your cross-site browsing history.
- We NEVER sell, rent, monetize, or license your personal information or metadata to data brokers, advertisers, or third parties.
4. Google API Services User Data Policy Compliance
Mail Track's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:
- Specific Limited Purpose: Data received through Google APIs (such as Gmail permissions) is used solely to provide user-facing email tracking features, specifically creating the custom labels
✓and✓✓and modifying thread labels upon sent and read events. - No Human Access: No humans at Mail Track read your email data or Google API data unless we have obtained your affirmative agreement for specific messages, doing so is necessary for security purposes (such as investigating a bug), or is required by applicable law.
- No AI Model Training: Information obtained from Google APIs is never used to train generalized artificial intelligence (AI) or machine learning (ML) models.
- No Advertising: Information obtained through Google APIs is never transferred or used for serving advertisements, retargeting, or consumer profiling.
5. How We Protect Your Data
We deploy robust enterprise-grade technical and organizational safeguards:
- End-to-End Encryption: All data transmitted between your browser, Gmail, and our servers is encrypted using Transport Layer Security (TLS 1.3 / HTTPS).
- Secure Token Storage: Google OAuth refresh tokens and session identifiers are stored in protected cloud database clusters with encryption at rest and strict cryptographic salting.
- Anti-CSRF & HttpOnly Cookies: Authentication cookies are marked
HttpOnlyandSameSite=Laxto prevent cross-site scripting (XSS) and cross-site request forgery (CSRF).
6. Data Retention and 1-Click Permanent Deletion
You retain full, unconditional ownership of your data at all times:
- 1-Click Account & Data Erasure: You can permanently wipe your entire account and all historical email tracking logs at any time by going to the Settings tab in your dashboard and clicking "Delete Account & Permanent Data Removal". This triggers an immediate, unrecoverable cascade delete from our database.
- Revoking Google Access: You can revoke Mail Track's access to your Google account at any moment through your Google Account Security Permissions. When revoked, Mail Track can no longer interact with your Gmail account.
7. Children's Privacy
Mail Track is intended for business, professional, and general adult communication. We do not knowingly collect or solicit personal data from children under the age of 13 (or under 16 in the European Economic Area). If we learn that we have collected information from a child, we will promptly delete that data.
8. Changes to this Privacy Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory modifications. When changes are published, we will update the "Last Updated" date at the top of this document. Continued use of Mail Track following notification of updates constitutes your acceptance of the revised policy.
9. Contact Us
If you have any questions, feedback, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: support@mailtrack.in
- Developer: Naveen Kumar (nnaveen.8527@gmail.com)
- Website: https://mail-track-pink.vercel.app • https://www.mailtrack.in