Privacy Policy
Effective date: November 11, 2026
This Privacy Policy explains how Mailex ("Mailex", "we", "us") handles information when you use the Mailex website and web application (the "Service"). Mailex is operated by an individual developer based in the Republic of Uzbekistan. If you have questions, contact us at gnarzullayev2000@gmail.com.
Google API Services — Limited Use. Mailex's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
1. Summary
- We use your Google data only to provide the features you see in Mailex.
- We do not sell your data, use it for advertising, or use your Gmail data to train artificial-intelligence or machine-learning models.
- People do not read your mail, except in the limited cases described in section 6.
- Disconnecting a mailbox deletes everything we stored for it and revokes Mailex’s access to it in your Google Account. You can also ask us to delete your account.
2. Information we access and collect
2.1 When you sign in with Google
We request the openid, email and profile permissions and receive your Google account identifier, email address, name and profile picture URL. This lets us create your Mailex account and recognise you when you return. Signing in does not give us access to your mail.
2.2 When you connect a Gmail mailbox
Connecting a mailbox is a separate step. You are asked to grant the Gmail permission https://www.googleapis.com/auth/gmail.modify, which allows Mailex to read, compose, send and modify messages in that mailbox (it does not allow permanently deleting mail). With it we access:
- Message content and metadata: senders, recipients, subject, date, message and thread identifiers, the message body (HTML and plain text), and read/unread and folder (Inbox, Sent, Trash) status.
- Attachment information: file name, type and size. Attachment files themselves are fetched from Gmail only when you open or download them, and are not stored by us.
- Mailbox address and a refresh token that lets Mailex keep the mailbox in sync until you disconnect it or revoke access.
2.3 Information you create in Mailex
- Folders, labels and rules you create, and which conversations you put in them.
- Mailbox settings: sender name and email signature.
- Files and images you attach while composing a message (see section 7).
2.4 Technical information
- A session cookie that keeps you signed in, and a short-lived cookie that protects the sign-in flow. We do not use advertising or analytics cookies.
- Server logs with technical request data such as time, IP address, browser user agent, requested address and response status. Logs do not contain message bodies, and cookies and authorisation tokens are removed from them.
3. How we use information
We use the information above only to provide and protect the Service:
- to show your conversations, search them and keep them in sync with Gmail;
- to send the messages, replies and forwards you write, when you press Send;
- to apply the actions you take — mark as read or unread, move to trash or restore, move to a folder, add a label — and mirror read/unread and trash changes back to Gmail;
- to run the rules you create on newly received mail;
- to notify you in the app when new mail arrives;
- to keep the Service secure, prevent abuse, and troubleshoot problems you report.
Mailex never sends, deletes or changes mail on its own initiative — only when you, or a rule you created, ask it to.
4. Our commitments on Google user data
In line with the Google API Services User Data Policy, including the Limited Use requirements, Mailex:
- uses data received from Google APIs only to provide or improve user-facing features that are prominent in the Mailex interface;
- does not transfer that data to others except as necessary to provide or improve those features, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you;
- does not use or transfer that data for serving advertisements, including retargeting, personalised or interest-based advertising;
- does not sell that data, and does not use it to determine creditworthiness or for lending purposes;
- does not use that data to develop, improve or train generalised or non-personalised artificial-intelligence or machine-learning models;
- does not allow humans to read that data unless you give affirmative consent for specific messages, it is necessary for security purposes (such as investigating abuse), it is necessary to comply with applicable law, or the data has been aggregated and anonymised for internal operations.
5. How we share information
We do not sell, rent or trade your information. We share it only:
- With Google, when Mailex calls the Gmail API on your behalf (for example to send a message or mark it as read).
- With infrastructure providers that host our servers and database, solely to run the Service and under obligations to protect the data.
- When required by law, such as a valid court order, or to protect the rights, safety and security of users and the Service.
- In a business transfer, such as a merger or sale of assets, in which case we will notify you and this policy will continue to apply to your data.
6. Human access to your data
No person at Mailex reads your messages, except: when you explicitly ask us to look at a specific message to help you (for example, when you report a problem); when necessary for security, such as investigating abuse; or when required by law.
7. Storage, retention and deletion
| Data | How long we keep it |
|---|---|
| Synced messages, conversation metadata, attachment information, folders, labels, rules and mailbox settings | While the mailbox is connected. Deleted immediately when you disconnect it. |
| Gmail refresh token | While the mailbox is connected; stored encrypted. Deleted when you disconnect. |
| Files attached while composing | Deleted after the message is sent, and in any case within 24 hours. |
| Session | Ends when you sign out, or after 30 days without use. |
| Account (Google identifier, email, name, picture) | Until you ask us to delete your account. |
| Server logs | A limited period needed for security and troubleshooting. |
Messages remain in your Gmail account. Disconnecting a mailbox in Mailex or deleting your Mailex account does not delete anything from Gmail.
Your choices
- Disconnect a mailbox in Mailex (mailbox menu → Disconnect) to delete everything stored for it and revoke Mailex’s access to it.
- Revoke Mailex's access at any time from your Google Account at myaccount.google.com/permissions. Mailex then stops syncing that mailbox.
- Delete your account and all associated data by emailing gnarzullayev2000@gmail.com from the address you sign in with. We complete deletion within 30 days and confirm by email.
- Access or correct your information by contacting us at the same address.
8. Security
We protect your information with encryption in transit (HTTPS), encryption at rest for Gmail refresh tokens (AES-256-GCM), access controls that limit each user to their own mailboxes, and protections against cross-site request forgery. Email content is displayed in an isolated, script-free frame. No method of transmission or storage is completely secure, but we work to protect your data and will notify affected users of a breach as required by law.
9. Children
The Service is not directed to children under 16, and we do not knowingly collect information from them. If you believe a child has provided us with information, contact us and we will delete it.
10. Where data is processed
Your information may be processed in countries other than the one you live in, including where our infrastructure providers operate. We take steps to ensure it remains protected in line with this policy.
11. Changes to this policy
We may update this policy. We will post the new version on this page with a new effective date, and for material changes we will notify you in the app or by email before they take effect.
12. Contact
Mailex is operated by an individual developer based in the Republic of Uzbekistan. For any privacy question or request, email gnarzullayev2000@gmail.com.