Privacy & security

What EmailChamp can access

You connect through Google's own sign-in. EmailChamp asks for one permission: to read your mail and to organize it (apply labels, archive, move things to Trash). That is the minimum the cleanup needs, and it asks for nothing else, no contacts, no other Google services. You can withdraw it anytime from your Google Account, or by disconnecting Gmail on your dashboard.

What we store

We store information aboutyour mail, not your mail itself. For each email that means the sender, the subject, Gmail's short preview snippet, the labels, and the decision EmailChamp made. Today the cleanup reads only this metadata; it does not open or store the full contents of your emails or their attachments.

If we ever add a feature that needs to read more (for example, deeper search or summaries), it will be something you choose to turn on, and we'll tell you plainly what it reads before it does.

How your data is protected

• Your connection key is encrypted. The token that lets EmailChamp reach your inbox is encrypted (AES-256-GCM) before it is written down, so it is never readable at rest.
• Your data is walled off to you.The database enforces row-level security, so one account can never read another's, and every query is additionally scoped to your own Gmail address.
• Everything moves over encrypted connections (HTTPS).
• The app runs on Vercel; your data lives in a managed Postgres database (Supabase).

Payments

We never see or store your card. Card details go straight to Stripe, our payment processor, which is PCI-DSS certified and handles cards for a large share of the internet. On our side we keep only Stripe's customer and subscription IDs, just enough to know whether your daily upkeep is active. No card number, expiry, or security code ever touches our servers.

You stay in control

Disconnect Gmail anytime from your dashboard, that revokes our access immediately and keeps your data. Cancel your subscription anytime from Settings, that stops the charge and the daily upkeep while keeping everything EmailChamp has learned, so coming back is easy. And if you want a clean exit, you can delete your data entirely from Settings, which erases everything it has learned about your mailbox and closes your account.

Questions about any of this? Email mohit@emailchamp.app.