Privacy policy

Effective October 24, 2026 · Footprint Promotions

What Mail Picker accesses

With your permission, we access your Google account identifier and email address, Gmail message metadata matching your searches, and the text of messages requested through your connected client. Gmail’s read-only OAuth scope permits reading the authorized mailbox. We do not request permission to send or change messages.

How information is used and shared

We use this data to connect your accounts, search your mail, read an exact message, maintain your sign-in, and provide account controls. Results are sent to the authenticated client you authorized, such as ChatGPT or Codex. That client may retain the results in your conversation under its own policies and data controls. Review those controls before connecting sensitive mail.

Mail Picker does not sell email data, use it for advertising, or use it to train general-purpose AI models. Mail Picker’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Storage and service providers

Cloudflare hosts the service and encrypted account credentials. We store the account identifiers and addresses needed to distinguish your mailboxes, encrypted OAuth tokens, account preferences, and short-lived authorization and browser-session records. Email bodies and search results are processed in memory and are not stored as a mailbox cache. We do not intentionally log tokens, callback codes, queries, or message contents. Google provides sign-in and Gmail data; your authorized client receives requested results. Network providers necessarily process connection metadata to deliver the service.

Retention and removal

Mailbox credentials expire after 180 days without renewal. Browser account-management sessions expire after one hour, management links after five minutes, and pending account links after ten minutes. Expired application records are purged on a scheduled basis. Client authorization records have a 180-day idle limit. Provider revocation or testing restrictions can end a connection sooner.

You can disconnect a mailbox or remove all Mail Picker connections and preferences in account settings. Removal disables access through those connections and deletes the live application records; it does not delete emails in Gmail or content already saved by your client. Encrypted database recovery copies may remain temporarily under Cloudflare’s backup-retention settings. You can also revoke Mail Picker in Google Account connections. See removal instructions.

Contact and changes

For access, correction, deletion, or privacy questions, contact quiwaan@footprintpromotions.com. We may update this policy as the service changes and will update the effective date. Material changes in data use require appropriate notice and consent.