1. Introduction
WaslMail ("WaslMail," "we," "us," or "our") operates the email productivity platform available at https://waslmail.org (the "Service"). WaslMail is an AI-powered email productivity platform featuring our "Raddad" AI assistant. The Service connects to your Gmail account through Google OAuth 2.0 in order to read, organize, draft, and send emails on your behalf. This Privacy Policy explains what information we collect, how we use and protect it, and the choices and rights you have. By accessing or using the Service, you agree to the practices described in this Policy. If you do not agree, please discontinue use of the Service.
2. Information We Collect
- Account Information. Your name, email address, profile photo, and authentication identifiers when you create an account or sign in.
- Google User Data. Information obtained when you authorize the Service via Google OAuth 2.0, including your Google account identity and the Gmail data described below.
- Email Content. The content of emails, drafts, threads, attachments, and labels you access, organize, or generate through the Service.
- Email Metadata. Headers, sender and recipient addresses, timestamps, subject lines, read/unread state, and similar technical attributes.
- Usage Logs and Analytics. Your interactions with the Service, feature usage, AI prompt and response records, error diagnostics, IP address, browser type, operating system, and device information.
3. How We Use Your Information
We use the information we collect to: (a) authenticate you and provide the Service; (b) enable the Raddad AI assistant to summarize, categorize, prioritize, draft replies, and automate email workflows you request; (c) improve, personalize, and maintain the Service and its features; (d) provide customer support; (e) protect the security and integrity of the Service; and (f) comply with applicable law. We process your information only for the purposes described in this Policy and consistent with your instructions.
4. Google API Services — User Data Policy
WaslMail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google user data only to provide and improve the user-facing features of the Service. We do not sell Google user data, we do not use it for advertising, and we do not transfer it to third parties except as necessary to provide or improve the Service, to comply with applicable law, or as part of a merger or acquisition.
The Google OAuth scopes we request and why we need each of them:
https://www.googleapis.com/auth/gmail.readonly— to read your emails and threads so the Raddad AI assistant can summarize, categorize, search, and prioritize your messages.https://www.googleapis.com/auth/gmail.send— to send emails on your behalf, only when you take an action or authorize a workflow that requires sending.https://www.googleapis.com/auth/gmail.modify— to organize your mailbox, including applying labels, archiving, and marking messages as read or unread.https://www.googleapis.com/auth/gmail.compose— to create and edit drafts on your behalf, so Raddad can prepare replies for your review before anything is sent.https://www.googleapis.com/auth/userinfo.email— to identify your Google account and email address for authentication and account management.https://www.googleapis.com/auth/userinfo.profile— to read your basic Google profile (such as your name and profile picture) to personalize your experience.
5. Data Sharing and Disclosure
We do not sell your personal information. We do not share Google user data with third parties for advertising or any purpose unrelated to providing the Service. We do not use email content for advertising. We do not allow humans to read your emails unless you give us explicit consent — for example, when you request customer support and authorize us to review specific messages. We may disclose information only: (a) to trusted service providers who process data on our behalf under strict confidentiality and data-protection obligations; (b) to comply with a valid legal request, court order, or applicable law; or (c) as part of a merger, acquisition, or sale of assets, in which case we will require the recipient to honor this Policy.
6. Data Storage, Security, and Retention
We store data using reputable cloud infrastructure and secure storage providers. We protect your information with industry-standard safeguards, including encryption in transit (TLS/HTTPS), encryption of stored credentials and tokens, and strict access controls that limit access to authorized personnel only. If any data is stored on our servers or those of our providers, we apply reasonable and appropriate technical and organizational measures. We retain your information only as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. When you delete your account or revoke our access, we delete or anonymize your data within a reasonable period, unless a longer retention period is required or permitted by law.
7. How to Revoke Access and Delete Your Data
You can revoke WaslMail's access to your Google account at any time by visiting https://myaccount.google.com/permissions and removing WaslMail, or from the connected-accounts section of your WaslMail dashboard. You can request deletion of your account and associated data from within the WaslMail dashboard or by emailing privacy@waslmail.org. We will process verified deletion requests within a reasonable period, subject to any legal retention requirements.
7a. Your Rights
Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. Under the GDPR you have the rights of access, rectification, erasure, restriction, data portability, and objection, as well as the right to lodge a complaint with a supervisory authority. Under the CCPA/CPRA you have the right to know, delete, correct, and opt out of the "sale" or "sharing" of personal information (we do not sell your data). To exercise these rights, contact privacy@waslmail.org.
8. Cookies
We use cookies and similar technologies to keep you signed in, remember your preferences, and maintain the security and reliability of the Service. You can control cookies through your browser settings, though disabling essential cookies may affect functionality.
9. International Transfers
We may process and store your information in countries other than your own, including where our service providers operate. Where we transfer personal data internationally, we take steps to ensure it receives an adequate level of protection consistent with this Policy and applicable law.
10. Children's Privacy
The Service is not directed to children under the age of 16, and we do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the revised Policy.
12. Contact Us
If you have questions or requests regarding this Policy or your data, contact us at privacy@waslmail.org or Ayoma813@gmail.com.