Privacy Policy

What MailDrafter.ai does

MailDrafter.ai connects to your Gmail account to read new incoming emails and generate draft replies using AI, grounded in a data source you provide (such as a FAQ page) and your relevant past emails. Every reply is saved as a draft in your Gmail for you to review, edit and send yourself. MailDrafter.ai never sends email on your behalf.

Gmail data we access

When you connect your Gmail account via Google Sign-In, we request two scopes: gmail.readonly, to read the incoming message we are replying to, and gmail.compose, to save the reply as a draft. These are the narrowest scopes that cover what the product does. We never send, delete, or modify your existing email, and we never change your Gmail settings.

We only access what is needed to draft a reply to a specific incoming email: that email's content, and a small number of your past emails to and from the same sender for context.

Zero-retention: we don't store your email content

Email content is processed in memory to generate a reply and is not saved to our database afterward. We do not store the text of your emails, or the drafts we generate. The section below sets out exactly what we do store, for how long, and how to have it deleted.

How long we keep data, and how it is deleted

Gmail message content is never retained. It is held in memory only for as long as it takes to generate one draft reply — typically a few seconds — and is discarded when that request ends. It is never written to our database, our logs, or any backup.

The data we do keep, and for how long:

• Your account (email address, balance, payment history) — until you delete your account.
• One OAuth refresh token per connected mailbox — until you disconnect that mailbox or delete your account.
• Your data sources (the links you enter, plus a cached copy of the text of those public pages) — until you remove them or disconnect the mailbox.
• A processing log recording which message IDs have been handled and what the AI call cost. It contains no message content, no subjects and no sender addresses, and is automatically deleted after 90 days.

Disconnecting a mailbox deletes that mailbox's record immediately, including its refresh token, its cached data-source text and its inbox-watch state.

To delete your account and all associated data, email ping@maildrafter.ai from your registered address. We delete everything within 30 days, except records of payments, which are retained for as long as applicable accounting law requires. You can also revoke our access at any time from your Google Account permissions page.

Use of AI to generate replies

To draft a reply, the relevant email content (the incoming message, your data source text, and a few past emails for context) is sent to Anthropic's Claude API, which generates the draft text. This is the only third party we share Gmail content with, and only for the purpose of generating your reply. We do not sell your data, and we do not use your Gmail content for advertising.

We do not use Google Workspace APIs to develop, improve or train generalized artificial intelligence or machine learning models. Your Gmail data is used solely to generate your own draft replies. It is not used to train any model, ours or anyone else's.

Our only third-party AI provider is Anthropic, used through the paid, commercial Claude API. Anthropic's policy states that, by default, it does not use inputs or outputs from its commercial products — including the Anthropic API — to train its models. We do not opt in to any feedback or data-sharing programme that would change this.

Google API Services User Data Policy

MailDrafter.ai's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Disconnecting your account

You can disconnect Gmail access at any time from your dashboard, which revokes our access and stops all automatic activity on your account, or by removing MailDrafter.ai's access directly from your Google Account permissions page. Signing out of MailDrafter.ai does not disconnect Gmail — it only ends your browser session.

Security

Your OAuth tokens are stored in an access-controlled database and are never exposed to the browser. All traffic to and from MailDrafter.ai is encrypted with HTTPS.

Contact

Questions about this policy? Contact us at ping@maildrafter.ai.