Mailreact (“we”, “us”) is an independent product that lives inside Gmail. We collect as little information as we can get away with, we don’t sell it, and we don’t use the contents of your email to train models. This page explains the details.
01 Introduction
This Privacy Policy describes how Mailreact handles personal information when you visit mailreact.com, join our waitlist, install the Mailreact Gmail extension, or otherwise interact with us. By using the service, you agree to the practices described here.
If anything below is unclear, write to hello@mailreact.com — a real person will reply.
02 Information we collect
We collect three categories of information:
You give it to us
- Waitlist sign-up: your email address and an opt-in timestamp.
- Account & workspace data: your name, email, profile picture, team name, and the data you enter into pipelines (deals, stages, notes, custom fields).
- Support & feedback: messages you send us by email or in-app.
Generated by your use of the product
- Activity logs: which pipelines and stages you move items through, so the product can sync state across your team.
- Diagnostic data: error reports and basic performance metrics, scrubbed of message content.
Collected automatically
- Device & connection: browser type, operating system, approximate region inferred from IP, and the referring page.
03 How we use information
We use the information above to:
- Operate the product — sign you in, sync your data across devices and teammates, and back it up.
- Send you the one waitlist email when access opens, plus the occasional product update if you opt in.
- Reply to support requests and investigate bugs.
- Keep the service safe — detect abuse, fraud, and security incidents.
- Comply with our legal obligations.
We do not sell your data, rent it, or share it with advertisers. We do not use the contents of your Gmail to train machine-learning models.
04 Gmail & Google data
Mailreact is a Gmail-native CRM, so it reads and writes data in your Gmail account. We follow Google’s Limited Use requirements:
- We access only the scopes needed to display, label, and reply to messages inside the pipelines you create.
- If you grant Gmail read access from a contact view, we fetch thread metadata (subject, recency, unread state, and a link back into Gmail) for that contact’s addresses. We do not copy message bodies, and we do not store those threads in our database.
- Email content is processed in memory to render your pipelines — we do not copy the body of your messages to our servers, and we do not retain message contents after the session.
- We do not transfer Gmail data to third parties except to provide or improve user-facing features, when necessary for security, or to comply with applicable law.
- We do not use Gmail data for advertising and we do not allow humans to read it, except where you give us specific permission to investigate an issue, where required for security, or to comply with the law.
07 Data retention
- Waitlist email: kept until access opens and you either sign up or ask to be removed.
- Account data: kept while your account is active. Deletion is final after 30 days; backups roll off within 90 days.
- Diagnostic logs: kept up to 90 days, then deleted.
08 Security
We protect data with industry-standard measures: encryption in transit (TLS 1.2+), encryption at rest, least-privilege access controls, and audit logging. No system is perfectly secure, but we take this seriously and disclose incidents promptly when they happen.
09 Your rights
Depending on where you live (GDPR in the EU/UK, CCPA in California, and similar laws elsewhere), you may have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Delete your data (“right to be forgotten”).
- Export your data in a portable format.
- Object to or restrict certain processing.
- Withdraw consent at any time without affecting prior processing.
To exercise any of these, email hello@mailreact.com. We’ll verify your identity and respond within 30 days.
10 Children
Mailreact is a business tool and is not intended for anyone under 16. We do not knowingly collect personal information from children. If you believe a child has provided us information, please contact us and we will delete it.
11 Changes to this policy
We may update this policy as the product evolves. When we make a material change, we’ll update the “Last updated” date at the top of this page and, if you have an account, notify you by email before the change takes effect.
12 Contact us
Questions, requests, or concerns about privacy can go to:
- Email: hello@mailreact.com
- Subject line: “Privacy — [your topic]” helps us route it quickly.