Privacy Policy
Respectfully is built with privacy and transparency in mind. This policy explains what we collect, why we collect it, and the controls you have.
Data We Process
We only process the data required to assist you with email management in Respectfully. This includes Gmail metadata (sender, subject, date, labels), message content needed for inbox search, thread retrieval, drafting, summaries, reminders, and AI-assisted replies, and your workspace configuration and preferences.
Permissions We Request
We request only the minimum Gmail API scopes necessary to provide our features: read access to retrieve and search your messages, compose access to create draft responses, and modify access to manage labels and read status.
How We Use Your Data
Your data is used solely to provide email management features including inbox search, thread retrieval, drafting, reminders, and AI-assisted replies. We do not use your data for advertising or ad targeting, user profiling or analytics for marketing, or selling or transferring to third parties for their purposes. To provide AI-assisted drafting and summarization, message content may be sent to OpenAI strictly for generating responses. OpenAI processes data only to deliver the requested functionality, does not use your data for model training or advertising, does not retain data beyond what is necessary to provide the requested functionality, in accordance with applicable data processing agreements.
Data Storage and Security
Authentication tokens are stored securely using industry-standard encryption. Access is restricted to the minimum required for service functionality. Data stored outside Gmail is limited to authentication credentials and user configuration. We implement security controls including access logging, encryption in transit and at rest, and regular security reviews.
Human Access
Respectfully employees do not access user email content during normal operations. Access may occur only in exceptional circumstances for critical security incidents, debugging with explicit user permission, or legal compliance requirements. All access is logged, authorized, and subject to strict confidentiality obligations.
Data Retention and Deletion
Data is retained only as long as necessary to provide the service. You can request deletion at any time through your account settings. Upon deletion request, data is immediately marked for removal and permanently deleted within 30 days to allow for backup purging. Authentication tokens are revoked immediately upon account disconnection.
Your Controls
You maintain full control over your data. You can disconnect your Gmail account anytime from settings, request complete data deletion from your account page, opt out of non-essential communications, and revoke permissions through your Google Account settings.
Google API Services User Data Policy Compliance
Respectfully's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Contact
For questions about this privacy policy or your data, contact us at allison@respectfully.so
Last updated: January 5, 2026