What we store
Email templates — designs you save are stored in our database (Firebase Firestore) and tied to your account.
Shared drafts — when you click Share on a draft, the email content is stored so collaborators can access it. Shared drafts automatically expire and are deleted after 30 days.
Contacts — names and email addresses you save are stored in our database and tied to your account. They are never shared with other users.
Sent history & analytics — a record of emails sent through EmailShaper (subject, recipient count, open and click counts) is stored server-side to power your Analytics dashboard.
What we do not store
- The contents of your Gmail or Outlook inbox — we do not read your mailbox
- Your calendar events — we read them only to display them to you and never save them to our database
- Your OAuth tokens — these are managed by Clerk and never touch our servers directly
- Any email body content outside of templates and saved drafts
Google API access & scopes
EmailShaper requests only the Google permissions required for the features you choose to use. We request the narrowest scope available for each feature:
- gmail.send — used solely to send the emails you compose, on your behalf, from your connected Gmail account. We do not read, search, organise, or modify your inbox.
- calendar.readonly — used solely to display your upcoming events on the in-app calendar. We have read-only access and never create, edit, or delete events, and we do not store your events.
- contacts.readonly — used solely to let you pick recipients from your Google contacts. Contacts are read on demand; only the contacts you explicitly save are stored, tied to your account, and never shared.
Limited Use disclosure
EmailShaper’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:
- We only use Google user data to provide and improve the features described above.
- We do not transfer or sell Google user data to third parties, ad networks, data brokers, or any other parties.
- We do not use Google user data for serving advertisements.
- We do not allow humans to read your Google user data unless we have your affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymised.
Your rights & data deletion
You can delete your templates from the Templates page and your contacts from the Contacts page at any time. Shared drafts expire automatically after 30 days. To delete your account and all associated data, email berlintyler11@gmail.com and we will remove everything within 30 days.