Privacy Policy

Last updated: December 29, 2025

Your privacy is important to us. It is SendMergeMail AI's policy to respect your privacy regarding any information we may collect from you across our website and the services we provide. This policy describes how we collect, use, store, and protect your data, including data accessed through Google APIs.

Google User Data Access

SendMergeMail AI requests access to the following Google user data to provide our mail merge service:

  • Google Sheets: We access your Google Sheets data to read recipient information, email addresses, and merge field values that you specify for your mail merge campaigns.
  • Gmail (Send Only): We access Gmail's send capability to send personalized emails on your behalf. We do not read, store, or access your existing emails or inbox content.
  • Email Address: We access your Google account email address to identify your account and manage your subscription and usage.

How We Use Your Data

We use the data we access for the following purposes:

  • Mail Merge Processing: We read data from your selected Google Sheet to personalize and send emails to your specified recipients.
  • Email Delivery: We use Gmail's send functionality to deliver your personalized emails directly from your Gmail account.
  • AI-Powered Email Generation: If you choose to use our AI features, we process your prompts and context to generate email drafts. This processing is done in real-time and prompts are not stored after generation.
  • Email Tracking: With your consent, we track email opens and link clicks to provide you with campaign analytics.
  • Usage Management: We track the number of emails sent and AI generations used to manage subscription limits.
  • Unsubscribe Management: We maintain a list of recipients who have unsubscribed to prevent future emails to those addresses.

Data Sharing

We do not sell, trade, or rent your personal information or Google user data to third parties. We may share data only in the following limited circumstances:

  • Service Providers: We use trusted third-party service providers to help operate our service, including cloud hosting, email delivery infrastructure, and AI processing. These providers only receive the minimum data necessary to perform their functions and are contractually obligated to protect your data.
  • Legal Requirements: We may disclose your information if required to do so by law or in response to valid legal requests by public authorities.

We do not share your Google Sheets content, email recipient lists, or email content with any third parties for their own purposes.

Data Storage and Protection

We implement appropriate technical and organizational measures to protect your data:

  • Secure Transmission: All data transmitted between your browser, Google services, and our servers is encrypted using HTTPS/TLS.
  • Authentication: We use Google's secure OAuth 2.0 authentication. We do not store your Google password or OAuth refresh tokens.
  • Database Security: Your data is stored in secure, managed database infrastructure with encryption and access controls.
  • Minimal Data Storage: We only store the minimum data necessary to provide our service. Your Google Sheets content is processed in real-time and is not permanently stored on our servers.

The data we store includes: your email address, email campaign metadata (recipient addresses, subjects, send status, tracking information), usage statistics, and unsubscribe records.

Data Retention and Deletion

We retain your data as follows:

  • Account Data: Your account information is retained for as long as your account is active.
  • Email Campaign Data: Email tracking and campaign data is retained to provide you with historical analytics and to maintain unsubscribe compliance.
  • Usage Data: Monthly usage statistics are retained to manage subscription limits.

Requesting Data Deletion: You may request deletion of your account and all associated data at any time by contacting us at support@sendmergemail.com. Upon receiving your request, we will delete your account and all associated data, including email campaign records, usage data, and unsubscribe records, within 30 days.

Revoking Access: You can revoke SendMergeMail AI's access to your Google account at any time through your Google Account permissions settings.

Google API Services Disclosure

SendMergeMail AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this privacy policy or our data practices, please contact us at support@sendmergemail.com.