Privacy Policy
This policy describes how Maildesk, operated by its private instance owner, processes information when you use the dashboard and connect Gmail. The operator's privacy contact is rateingyt@gmail.com.
Information we process
- Connected Gmail addresses, granted permission scopes, encrypted OAuth access and refresh tokens, and connection timestamps.
- Email headers, message content, recipient addresses and attachments needed to display conversations, search mail or send a message at your request.
- Google OAuth client settings supplied by the operator; the client secret is encrypted in the application database.
- Telegram identity information used to verify the configured owner, session records, temporary login tickets, OAuth authorization state, webhook update identifiers and message-send status identifiers.
- Technical request information, such as IP addresses, timestamps and errors, may be processed in infrastructure and security logs.
How information is used
We use this information only to authenticate access, connect and maintain Gmail access, display requested mail, send messages and attachments you submit, prevent duplicate operations, and maintain security and reliability. Maildesk does not ask for your Google password.
Google user data and Limited Use
Maildesk's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is not sold, used for advertising, or used to develop, improve or train generalized AI or machine-learning models.
Sharing and access
Data is processed on the Maildesk hosting server. Requests needed to read or send Gmail data are sent to Google; messages and attachments are delivered to the recipients you choose. Telegram processes bot interactions and identity information needed for sign-in; Maildesk does not intentionally send email bodies or attachments to Telegram. Hosting and network providers process data necessary to operate their services. The server operator has administrative access to the hosting environment. Data may also be disclosed where required by applicable law.
Storage and security
The application database stores mailbox connection metadata, encrypted tokens, settings and authentication/operation records. Email bodies and attachments are fetched or transmitted as needed; they are not intentionally archived in the application database. Temporary processing occurs in memory and in your browser. Email remains subject to Gmail's own storage and retention. HTTPS protects transport; OAuth tokens and client secrets are encrypted in the database. Session cookies are HttpOnly and Secure on the hosted service. These measures reduce risk but do not guarantee absolute security.
Retention, disconnection and deletion
Connection records and tokens are retained while the mailbox remains connected. Disconnecting an account removes its stored connection record and tokens from the active application database and attempts to revoke Google access. You can independently revoke access at Google Account connections. Disconnection does not delete emails from Gmail. Authentication and operational records may remain for service operation and security; backups, if maintained, may retain prior copies until rotated. To request deletion of remaining application data, contact the operator at the address below.
Browser storage
Maildesk uses a session cookie to keep you signed in and local browser storage to remember your theme preference. These are used for application functionality, not advertising tracking.
Your choices and policy changes
You may choose not to connect Gmail, disconnect an account, revoke Google permissions, or contact rateingyt@gmail.com with access or deletion requests. If this policy changes, the updated version and effective date will be published here.