Privacy Policy

Effective date: August 29, 2026

Mail Bridge is a private, read-only Gmail statement intake service for RewardOS.

Gmail Scope

Mail Bridge requests only:

https://www.googleapis.com/auth/gmail.readonly

Data Accessed

Mail Bridge may read Gmail messages that match an owner-configured statement search query. For matching messages, it may read message metadata needed for retrieval and inspect message parts to locate PDF attachments.

Data Used

Mail Bridge uses Gmail data only to identify matching statement emails, validate PDF attachments, deduplicate already-seen documents, and stage accepted statement PDFs for RewardOS processing.

Data Stored

• Accepted PDF statement attachments may be stored as statement artifacts.
• Internal opaque digests and counters may be stored for deduplication, leasing, auditing, and processing state.
• Refresh tokens are encrypted locally.
• Access tokens are held in memory only.

Data Not Stored

Mail Bridge does not intentionally retain raw message bodies, message headers, senders, subjects, OAuth authorization codes, access tokens, or provider error bodies.

Data Sharing

Mail Bridge is used for private statement intake. It does not sell Gmail data or share Gmail data for advertising.

Deletion

Disconnecting Gmail revokes the provider token and removes the local encrypted Gmail credential after revocation succeeds. Stored statement artifacts and processing records can be deleted by the operator when they are no longer needed.

Contact

Questions can be sent to flex411@gmail.com.