Privacy Policy.

This policy explains how MailViewed (“we”) handles your data on our website, dashboard and Chrome extension. In short: we never ask Google for permission to read your mail, we keep no email body or attachments, and you can delete everything yourself at any time.

What we collect

• Your account: name and email address from Google sign-in, your settings and, if you set one, your own tracking domain. We never see your Google password.
• Setup: the date the extension first linked to your account, the last day it was active, the date your first email was tracked and, if you hide the setup guide, the date you hid it. When you join, we send you one welcome email and keep the date we sent it. If you have not tracked an email a day after signing up, we may send you one setup reminder by email, once, and we keep the date we sent it. We also count anonymous setup events, such as an install or the reason you pick if you remove the extension, with no account attached.
• Each email you track: the subject, the recipients, the send time, the addresses of any links you chose to track, and who replied and when. Never the body, attachments or a preview.
• Opens and clicks: the time, IP address and browser of each one. We use them to tell people from automated scanners and to show you the kind of device or mail app behind an open, when that can be told. We do not turn IP addresses into locations.
• From the extension: it uses no Gmail API permission and never searches or downloads your mailbox. It works only inside the Gmail page you have open, and tells us when you view your own tracked email (so it doesn't count as an open) and who replied in a tracked conversation you open, never what they wrote. If you open an email someone else tracked with MailViewed, it sends us that email's tracking code and the Gmail address you are reading it in, so we can check you are a recipient and confirm the sender's read receipt; we keep only the time. This works in any Gmail account open in Chrome with the extension, even one not signed in to MailViewed.
• What you save: your templates and signature.
• Billing: Paddle handles payments. We keep your Paddle customer and subscription IDs and plan dates, never your card details. When you subscribe, or move from Pro to Outreach, we email you once about your plan, and we keep a note of which subscription and plan that email was for, so it is not sent again. If you start the free Pro trial, we email you once shortly before it ends and once after, and we keep the dates of those emails and, if you hide the trial reminder on your dashboard, the date you hid it.

Signing in with Google, recording the subject, recipients and time of the emails you track, and the extension's reports above are what make MailViewed work. Connecting Gmail, link tracking, alert emails, templates and your own tracking domain are optional and can be switched off.

Your message content

A tracked email sent from Gmail never passes through us. Two features are different, because we send the email for you through your own Gmail: Compose (sending from the dashboard) and individual copies of a group email. The message passes through our server only to be sent, encrypted and held briefly, and is deleted the moment the send finishes. No person reads it and none of it is kept.

Connecting Gmail

Connecting Gmail is optional. It asks Google for one send-only permission (gmail.send), used only to send the emails you ask us to send. It cannot read, search or download your mail. When you disconnect in Compose or delete your account, we ask Google to remove the permission. You can also remove it yourself at myaccount.google.com/permissions.

MailViewed's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Data we receive through Google is used only to provide the features you asked for, never for advertising and never to train AI models. A person sees it only when you ask us to (for example in a support request), to keep the service secure and prevent abuse, or when the law requires it, and we never pass it to others except to run the service or when the law requires it.

The people you email

A tracked email contains a tiny invisible image that tells us when it is opened. About your recipients we hold the name and address you entered, the opens and clicks on the emails you sent them, and whether and when they replied. Never what they wrote, their inbox, their contacts or their location. You choose to track an email and are responsible for your recipients' data; we process it on your instructions.

If someone used MailViewed to email you and you want the data about you removed, write to [email protected] from the affected address. We remove the open and click records for that address and confirm when it is done.

Who helps us run MailViewed

We do not sell your data or use it for advertising. We share it only with a few trusted providers that help us run the service, such as Google (sign-in, and sending if you connect Gmail), Paddle (payments), Cloudflare (security) and DigitalOcean (hosting), and only for that purpose. Where EU or UK law applies to a transfer outside your country, we rely on these providers' standard contractual clauses.

How long we keep data

• Tracking data is deleted 12 months after the email was sent, or sooner if you delete the email. Only the addresses behind tracked links can live up to 12 months longer, with no connection to you or your recipients, so links in emails already sent keep working.
• Templates and signature: until you delete them or your account.
• Backups: we keep backup copies so we can recover from a failure. They are deleted after 30 days, except the three newest.
• Your tracking domain name is held for 180 days after you remove it or leave the plan, so nobody can claim it right away, then deleted.
• Server logs: we don't log visits, opens or clicks. Short technical logs never include message content and are deleted automatically.
• Deleting your account from Settings removes your data from our live database immediately, including recipient data and your Gmail connection, and cancels any subscription still billing. We keep only our record of payments and plan changes (your email address, Paddle IDs and dates) as a billing record; backups and a released domain name expire as above.

Your rights

• See or take your data: Pro and Outreach accounts can download their tracked emails, recipients, opens, clicks, notifications and templates from Settings as a JSON file; anyone can email us for a copy of everything we hold about them.
• Delete it: remove a tracked email from your dashboard, or your whole account from Settings, no questions asked.
• Correct, restrict or object: email us and we will correct inaccurate data, restrict processing while a dispute is resolved, or stop a use you object to where the law gives you that right. Withdraw consent any time by disconnecting Gmail or turning alert emails off in Settings.
• California: you have the right to know, to delete, and to opt out of the sale or sharing of personal information. We do not sell or share it as defined by the CCPA/CPRA.
• EU and UK: we process your data to provide the service you signed up for (contract), to keep billing records (legal obligation) and on our legitimate interest in telling people from automated scanners, confirming read receipts, showing public reviews of MailViewed and keeping the service secure. You may complain to your data protection authority, or to the ICO in the UK.

We answer requests within 30 days and may ask you to write from the affected email address so we know the request is yours.

A few more things

• Automated checks: opens are classified as a person or a scanner, and tracking can be paused, by us or automatically, on an account tracking far above our fair-use volume. While paused, emails you send from Gmail still go out untracked, but the dashboard can't send. A person reviews any pause when you email [email protected]. We make no automated decisions with legal or similarly significant effects.
• Reviews on our homepage: we may show some public reviews of MailViewed from the Chrome Web Store, with the name the reviewer uses there. Email [email protected] and we will remove yours.
• Cookies: only what is needed to keep you signed in and remember your preferences. No advertising or analytics cookies. See our Cookie Policy.
• Children: MailViewed is for adults and businesses. We don't knowingly collect data from anyone under 16; email us and we will delete such an account.
• If something goes wrong: if a security breach affects your personal data, we tell you without undue delay and notify the authority where the law requires it.
• Changes: we update the date at the top. For material changes we tell account holders by email or in the dashboard before they take effect.

How we protect your data

Every connection is encrypted with HTTPS, your Gmail connection is stored encrypted, and each account can reach only its own data. The details are on our Security page.

Contact

Questions about privacy? Email [email protected].