Privacy Policy

This policy describes how the Chromail Windows desktop application handles Google user data. Chromail is developed by soybean_alien as an independent project.

What Chromail accesses

When you choose to connect a Google account, Chromail requests Google OAuth access to your Gmail account and basic profile information. The app uses this access to show the signed-in address and profile image, retrieve and display email and attachments, monitor for new mail, send messages, and apply supported message actions such as archiving or moving a message to Trash.

How your data is used and stored

Chromail processes mail on your Windows device and communicates directly with Google’s Gmail and sign-in services to provide the features above. The app does not send your email content to a Soybean Alien server, and the developer does not collect, sell, or share Google user data. Message content is held in memory while the app is running and is not intentionally saved to disk by Chromail.

Chromail saves account sign-in tokens in its local account store, encrypted using Windows Data Protection API for the current Windows user. The account-store file is kept on your device. Google passwords are entered on Google’s own sign-in page and are not provided to Chromail.

Sharing

Chromail's use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Chromail does not disclose Google user data to the developer or other third parties. Data is sent to Google when needed to authenticate, retrieve or update mail, and to deliver messages you choose to send. Google’s handling of that data is governed by Google’s Privacy Policy.

Your choices and deletion

You can disconnect an account by removing it from Chromail and can revoke Chromail’s Google access from your Google Account permissions. You can also close the application at any time. Removing an account from Chromail deletes its locally stored sign-in data through the app’s account-removal feature.

Security and children

OAuth tokens are encrypted for the Windows user account. No method of local storage is a guarantee against access by someone who controls that Windows account or device. Chromail is not designed for children under 13.

Changes and contact

This policy may be updated when Chromail’s data practices change. The current version will be available at this URL. For questions about Chromail or this policy, contact the developer through the soybean_alien GitHub profile.

Chromail is independent software and is not affiliated with Google LLC.