Privacy

Privacy and AI processing

MailCat assists with replies you choose to open in Gmail. After you sign in and click Reply, it analyzes the visible target message and relevant visible quotations to identify points that need your answer. Compiling or updating a draft sends your chosen answers and instructions for AI processing. Only you can insert the draft into Gmail and send the message.

Information used

MailCat processes the message text, subject, sender, visible relevant quotations, your answer choices, custom answers, additional instructions, and editable draft when you use those features. It does not read attachments. Google sign-in provides your account email, profile name, and optional profile picture to show your account. MailCat also receives subscription, transaction, and billing-country information from Creem to verify payment and access; it does not receive your card number.

AI providers and Limited Use

MailCat sends the relevant content through its Supabase backend and OpenRouter to run GPT-OSS-120B. Depending on availability, OpenRouter may route the request to Crusoe, Baseten, Groq, or Cerebras. Compiling and updating a draft also sends your decisions, instructions, and preview. These providers may retain data for operational, abuse-prevention, or legal purposes under their own policies. Review OpenRouter's privacy policy and the policies of its listed inference providers. Do not use MailCat on messages you are not permitted to share for this processing.

MailCat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. MailCat uses Gmail content only to assist with the reply you request. It does not sell that content, use it for advertising or credit decisions, or let humans read it except as needed for security, support you request, legal obligations, or operations allowed by that policy.

Payments and other providers

Creem handles checkout, determines the buyer's billing country and applicable tax, and processes payment details under Creem's privacy notice. MailCat uses the payment and subscription information returned by Creem only to provide access, handle billing events, and meet recordkeeping obligations. Google provides sign-in, Supabase hosts MailCat's account and billing backend, and OpenRouter and its listed inference providers process the content described above. MailCat does not sell your data or use it for advertising.

Storage and retention

MailCat stores account, entitlement, subscription, and limited operational records. Its current inference flow does not store message bodies, chosen answers, or generated replies in its database. Authentication tokens stay in trusted extension storage. Scheduled cleanup removes operational request and cost records older than 30 days and processed billing event identifiers 90 days after processing. Pending or quarantined billing event identifiers are kept for no more than 12 calendar months after receipt, whether or not they can be linked to an account. Unresolved events receive an operator review alert before that deadline; only non-identifying aggregate counts remain in the purge audit. After account deletion, linked subscription, checkout, and account billing records are scheduled for removal 12 calendar months after deletion. Minimal records of completed sales—provider transaction, customer, subscription and product IDs, amount, currency, and billing period—are kept for seven years from recording to meet merchant recordkeeping obligations. They contain no Gmail content and are separate from the deleted account. A longer period may apply if required by law.

Your choices

Sign out from the MailCat popup to stop further analysis. You can confirm account deletion from the popup after recent Google sign-in. Confirmation disables MailCat access immediately and starts immediate cancellation of any Creem subscription, including time already paid for. An unresolved checkout or provider error can delay final deletion; MailCat retries until it can verify cancellation, and support can help. Deletion removes your profile, saved identities, and historical interactions; billing records follow the retention rules above. To prevent repeat free trials after deletion, MailCat retains a private keyed fingerprint of your Google provider account ID, without your email address or plaintext provider ID. This marker remains for as long as MailCat offers a one-time trial and is not used for Gmail analysis. Email support@mailcat.site for assistance or data-access questions.