Back

Privacy Policy

Last updated: April 2026

What we store

Email templates — designs you save are stored in our database (Firebase Firestore) and tied to your account.

Shared drafts — when you click Share on a draft, the email content is stored so collaborators can access it. A shareable link created this way stops granting access after 30 days. Team members you explicitly invite to a draft keep their access for as long as the draft exists, or until you remove them.

Contacts — names and email addresses you save are stored in our database and tied to your account. They are never shared with other users.

Sent history & analytics — a record of emails sent through EmailShaper (subject, recipient count, open and click counts) is stored server-side to power your Analytics dashboard.

What we do not store

  • The contents of your Gmail or Outlook inbox — we do not read your mailbox
  • Your calendar events — we read them only to display them to you and never save them to our database
  • Your OAuth tokens — these are managed by Clerk and never touch our servers directly
  • Any email body content outside of templates and saved drafts

Google API access & scopes

EmailShaper requests only the Google permissions required for the features you choose to use. We request the narrowest scope available for each feature:

  • gmail.send — used solely to send the emails you compose, on your behalf, from your connected Gmail account. We do not read, search, organise, or modify your inbox.
  • calendar.readonly — used solely to display your upcoming events on the in-app calendar. We have read-only access and never create, edit, or delete events, and we do not store your events.
  • contacts.readonly — used solely to let you pick recipients from your Google contacts. Contacts are read on demand; only the contacts you explicitly save are stored, tied to your account, and never shared.

Limited Use disclosure

EmailShaper’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

  • We only use Google user data to provide and improve the features described above.
  • We do not transfer or sell Google user data to third parties, ad networks, data brokers, or any other parties.
  • We do not use Google user data for serving advertisements.
  • We do not allow humans to read your Google user data unless we have your affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), to comply with applicable law, or the data has been aggregated and anonymised.

Third-party services

Your rights & data deletion

You can download everything we store about your workspace — contacts, templates, drafts, sent history, automations — as a single file from Settings at any time. You can delete your templates from the Templates page and your contacts from the Contacts page at any time. A shareable link to a draft stops granting access 30 days after it's created. To delete your account and all associated data, email berlintyler11@gmail.com and we will remove everything within 30 days.

Contact

Questions about this policy? berlintyler11@gmail.com

You can also review our Terms of Service.