NovusMail Privacy Policy

1. Information We Collect

To provide our keyboard-first inbox and calendar workspace, we access and store the following data:

• Account Identity: Your email address and display name obtained during Google Sign-In.
• Google API Credentials: Tenant-scoped OAuth access and refresh tokens used to authenticate requests to Google APIs.
• Workspace Cache: Temporarily cached Gmail message headers, thread details, labels, and Google Calendar events stored locally in a secure database to enable priority sync, fast search, and offline views.

2. Google API Data & Limited Use Disclosure

NovusMail's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, we do not use your Google user data for serving advertisements, and we do not transfer this data to third parties unless required for security, legal compliance, or as part of providing the core workspace features.

3. How We Use Information

We process your data strictly to deliver the service, including:

• Displaying your unified focus queue, message details, and calendar agenda on a single workspace interface.
• Executing message actions (reply, archive, star, trash) and event mutations directly on your behalf.
• Powering proposal-based AI features to draft emails or draft calendar events. All AI-generated changes require your explicit review and confirmation before leaving the application.

4. Data Security & Encryption

Security is foundational to NovusMail. Sensitive credentials (such as Google OAuth refresh tokens) are encrypted at rest in our database using a secure Key Encryption Key (KEK). Data in transit is secured using industry-standard Transport Layer Security (TLS/HTTPS).

5. Data Sharing & AI Providers

We do not sell, rent, or trade your personal information. We do not use Google API data to train artificial intelligence or machine learning models. If you use the optional AI operator to draft replies or inspect context, only the relevant email thread or calendar snippet is sent to our AI API provider to generate the draft. These providers are contractually bound not to retain or use your data for training.

6. Your Control & Account Deletion

You can revoke NovusMail's access to your Google Account at any time via yourGoogle Security Settings. To request permanent deletion of your account and cached data from our systems, please contact support atvinayrpdev@gmail.com.

7. Contact Us

If you have any questions or concerns regarding this Privacy Policy or our data practices, please contact us at:

Email: vinayrpdev@gmail.com