Privacy Policy

**Last Updated:** December 1, 2025

## Introduction

Email Assistant ("we", "our", or "the application") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your information when you use our email management application.

## Information We Collect

### OAuth Authentication Data

When you authorize our application to access your email account, we collect the following information through Google OAuth 2.0:

- **Email Address:** Your email address is used to identify your account and establish the connection to your email service.
- **OAuth Tokens:** We receive and store OAuth access tokens and refresh tokens provided by Google. These tokens are stored locally on your device in a secure file (`token.json`).

### Email Data

Our application accesses your email data only for the following purposes:

- **Reading Emails:** To display email content, including sender, subject, date, and body text.
- **Sending Emails:** To send emails on your behalf when you request it.
- **Email Management:** To mark emails as read, reply to emails, and perform other email operations you request.

## How We Use Your Information

We use the information we collect solely for the following purposes:

1. **Email Management:** To provide email reading, sending, and management functionality as requested by you.
2. **Authentication:** To maintain your authenticated session with your email provider.
3. **Application Functionality:** To enable the core features of the email assistant application.

## Data Storage and Security

### Local Storage

- All OAuth tokens are stored **locally on your device** in a file called `token.json`.
- Email data is accessed in real-time and **not stored permanently** on our servers.
- We do not maintain any central database of your email content.

### Security Measures

- We use OAuth 2.0, a secure industry-standard authentication protocol.
- All connections to email servers are encrypted using SSL/TLS.
- OAuth tokens are stored locally and never transmitted to third parties.
- We do not store your email passwords.

## Data Sharing

**We do NOT:**

- Share your email data with third parties
- Sell your information to advertisers
- Use your data for marketing purposes
- Store your email content on external servers
- Access your emails without your explicit authorization

## Third-Party Services

Our application uses the following third-party services:

- **Google OAuth 2.0:** For secure authentication with Gmail accounts
- **Email Service Providers (IMAP/SMTP):** For accessing email accounts from various providers

These services have their own privacy policies, and we encourage you to review them.

## User Rights

You have the right to:

- **Revoke Access:** You can revoke our application's access to your email account at any time through your Google Account settings or email provider settings.
- **Delete Data:** You can delete the `token.json` file on your device to remove all stored authentication tokens.
- **Stop Using the Application:** You can stop using the application at any time, and we will no longer access your email data.

## Children's Privacy

Our application is not intended for users under the age of 13. We do not knowingly collect information from children under 13.

## Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by updating the "Last Updated" date at the top of this policy.

## Contact Us

If you have any questions about this Privacy Policy, please contact us at:

**Email:** hey.buddy.ai@gmail.com

## Compliance

This Privacy Policy complies with:
- General Data Protection Regulation (GDPR)
- California Consumer Privacy Act (CCPA)
- Google OAuth API Services User Data Policy

---

**By using Email Assistant, you agree to this Privacy Policy.**