Privacy policy

MailGo is operated by BESTAI LABS LIMITED in New Zealand.

Google access

We request your Google identity and permission to send email through the account you explicitly connect. We cannot read, list or search your inbox. You receive an API key for your own connected account. If you accept a personal invitation, its sender can also access the key to set up sending for you. Independent signups do not grant this access to an invitation sender.

What we store

We keep your customer name, email address, connection status, encrypted Google refresh token, encrypted API key and its hash, invitation sender, invitation hash and expiry, and account setup dates. These are account configuration, not email records.

What we do not store

Email recipients, subjects, bodies, attachments, Gmail message IDs and per-message sending history are not stored by MailGo. Email contents are processed in memory only to send your request. We do not maintain sending counters, mail queues or analytics about individual emails. Application request logging and tracing are disabled.

Service providers

Cloudflare hosts the application and account configuration. Google processes and delivers email and normally retains a copy in Gmail Sent. Their own infrastructure and security data policies apply. We do not sell Google data, use it for advertising, or use it to train AI models. MailGo's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Control and deletion

You can revoke MailGo in your Google Account connections. You can also disconnect Gmail in your account. Your authorized invitation sender can disconnect Gmail and remove its stored authorization and API key. Contact billbot.liu@gmail.com to request deletion of your account configuration.