Privacy policy

1. Who this policy covers

This policy applies to the Redakt website, hosted service, and email client. Redakt is an open-source mail product that lets you connect Gmail or use a mailbox on a domain you control. Questions about this policy can be sent to hey@stylessh.dev.

2. Information Redakt collects

• Account information. Your name, email address, profile image, sign-in method, password hash when you use a password, account preferences, and account creation and update times.
• Session and security information. Session tokens, session expiry, IP address, user agent, and operational logs needed to secure and troubleshoot the service.
• Google account and Gmail information. Your Google account identifier, email address, name, profile image, OAuth grant, Gmail mailbox identity, message and thread metadata, message content, attachments, drafts, labels, and mailbox changes you ask Redakt to make.
• Gmail connection metadata. A Gmail history cursor, subscription expiry, last-sync time, connection health, and error state so Redakt can keep the inbox current.
• Hosted-mail information. If you use a custom domain, Redakt stores the domain, mailbox address, encrypted mailbox credential, DNS setup and verification state, and the mail held by the connected mail server.
• Optional AI settings and results. If you turn on an AI feature, Redakt stores the features you enabled and the time and version of your data-processing agreement. With Focus on, Redakt also stores the latest Focus result for each mailbox and a category and score for each classified conversation. With Draft replies in advance on, it stores the replies it prepared. Focus results and prepared replies are encrypted.

3. How Redakt uses information

• Create and secure your account, authenticate requests, and remember your preferences.
• Display, search, organize, draft, send, and otherwise process email when you choose those actions.
• Classify recent inbox conversations in Focus, prepare replies, or assist with writing when you separately turn on those AI features. Focus and prepared replies run in the background, before you open the conversation.
• Keep connected mailboxes synchronized and notify the interface when Gmail changes.
• Provide custom-domain mailboxes and help you configure required DNS records.
• Prevent abuse, diagnose failures, maintain reliability, and comply with legal obligations.
• Respond to support requests and communicate material service or policy changes.

4. How Redakt handles Google user data

Google sign-in and Gmail access are separate. Google sign-in requests basic identity information. Redakt requests Gmail access only when you choose to connect Gmail. That access lets Redakt show and search your mailbox, read messages and attachments, create and send drafts, change read and starred state, apply mailbox labels, and move threads between inbox, archive, spam, and trash.

Redakt stores your Google account identity, encrypted access and refresh tokens, granted permissions, and the connection metadata described above. Gmail remains the source of truth. Gmail message bodies and attachments are fetched when needed to serve your request and are not persisted in Redakt's application database. Redakt processes the fetched data to return the requested mailbox view to your authenticated browser.

Redakt does not sell Google user data, use it for advertising, determine creditworthiness, or use it to train general-purpose AI or machine-learning models. People do not read your Gmail data unless you give explicit permission for support, access is necessary to investigate a security or abuse issue, or access is required by law.

AI features are optional and off by default. If you agree to AI processing, Focus sends the subject, sender, date, and preview from up to 20 recent inbox conversations through Vercel AI Gateway for classification. This happens in the background when new mail arrives and about every 15 minutes, as long as you have signed in to Redakt in the past 14 days. A conversation is sent again only when it changes, or once a day so time-sensitive categories stay accurate. When a classification is uncertain, Focus may also send bounded message text from that conversation. Smart Compose may send the current draft, subject, recipients, and recent messages from the conversation so the selected model can complete, draft, or revise text. With Draft replies in advance on, Smart Compose does this in the background for conversations that appear to need your reply. Redakt does not use this content to train models or let an AI feature send mail or apply mailbox actions automatically. Vercel and the selected model provider process only the data needed to return the requested feature.

Redakt's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements.

5. When information is shared

Redakt does not sell personal information. Information is shared only as needed to provide the service, protect it, comply with law, or complete a transaction you request.

• With Google when Redakt makes Gmail API or account requests on your behalf.
• With infrastructure providers that host the application, database, mail server, networking, or security services, subject to their role in operating Redakt.
• With Vercel AI Gateway and the selected model provider only when you enable an AI feature and request or trigger its assistance; the request uses Redakt's server credential and is limited to the classification or writing assistance you enabled.
• When you direct Redakt to send mail or otherwise share content with a recipient.
• When required by applicable law or necessary to protect users, Redakt, or the public from fraud, abuse, or security threats.
• As part of a merger, acquisition, or sale of assets only after any consent required by the Google user-data rules or applicable law is obtained.

6. Retention, disconnection, and deletion

Account information and connection metadata are kept while your account or connected mailbox remains active, and longer only when needed for security, legal obligations, or resolving disputes. Gmail message bodies and attachments are not retained in Redakt's application database. Focus results, conversation categories, and prepared replies are kept while the feature that created them is on: turning Focus or Draft replies in advance off, withdrawing AI consent, or disconnecting a mailbox deletes them. Prepared replies you do not use are deleted after 7 days, and categories for conversations that leave your inbox after 30 days. Inline writing suggestions you do not accept are not stored. Text you accept may be saved as part of a normal email draft. Your enabled-feature settings and consent record remain until you remove them or delete your account. Operational logs are kept only as long as reasonably necessary for security and reliability.

• Disconnect Gmail: Open Settings, choose Email accounts, then remove the Gmail account. Redakt stops the Gmail watch, asks Google to revoke the grant, clears local token material, and deletes the connection metadata. Mail remains in Gmail.
• Revoke at Google: You can also remove Redakt from your Google Account connections.
• Delete Redakt: Open Settings, choose Account, then delete the account. This removes the Redakt account and its local settings, sessions, connected-account records, custom domains, and hosted-mail data. Remove Redakt from Google Account connections if you also want to confirm the Google grant is revoked.

7. Security

Redakt uses HTTPS in transit, encrypted OAuth tokens and mailbox credentials at rest, access controls, and other reasonable safeguards. No online service can guarantee absolute security, so you should use a strong password, protect your connected accounts, and report suspected unauthorized access promptly.

8. Cookies and local storage

Redakt uses necessary cookies for authentication, security, and saved preferences. It may use browser storage to remember interface state such as open mailbox tabs. Redakt does not use third-party advertising cookies. Google may use its own cookies when you choose Google sign-in or Gmail authorization, subject to Google's policies.

Remote images can be used by senders to learn that a message was opened and to receive technical information such as your IP address and browser details. Redakt loads remote images by default. You can turn off Load remote images under Settings, then Appearance & reading.

9. Your choices and rights

You can update your name and preferences, disconnect Gmail, revoke Google access, or delete your Redakt account from Settings. Depending on where you live, you may also have rights to access, correct, delete, restrict, or receive a copy of personal information. Contact Redakt to make a request. Identity verification may be required before a request is completed.

10. International processing and children

Redakt and its service providers may process information in countries other than the one where you live. Redakt is not directed to children under 13, and children under the minimum age required in their country may not use the service without authorization from a parent or guardian.

11. Changes and contact

This policy may change as Redakt changes or legal requirements evolve. Material changes will be announced in the service or through another reasonable channel before they take effect when required. Questions or privacy requests can be sent to hey@stylessh.dev.