Privacy Policy

1. Information We Collect

We collect information you provide directly to us, such as when you create or modify your account, request customer support, or otherwise communicate with us. This includes your email address (via OAuth), name, and API usage metadata.

2. How We Use Your Information

We use the information we collect to provide, maintain, and improve our services. Specifically, we use it to authenticate your API requests, route your emails through your connected OAuth providers, and monitor for abuse or spam.

3. Email Data Privacy

SendLiberty acts as a proxy. We do not permanently store the content (body) of the emails you send through our API. We only process the payload in memory long enough to deliver it to the respective upstream provider (e.g., Google Gmail API). We log metadata (timestamps, recipient address, subject line, success/failure status) for debugging, rate-limiting, and usage analytics purposes.

4. Google User Data

When you connect a Gmail account, SendLiberty requests the gmail.send OAuth scope, which allows us to send emails on your behalf. We do not read, index, or store the content of any emails in your Gmail inbox. The only Gmail data we access is your Gmail address (to identify the connected account) and the OAuth access and refresh tokens required to send emails on your behalf.

Your OAuth access and refresh tokens are encrypted at rest using AES-256 encryption and are never exposed or shared with third parties.

SendLiberty's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

5. Data Retention

We retain the following data for as long as your account is active:

• Account information (name, email, provider ID): Retained indefinitely while your account exists.
• Connected Gmail account credentials (encrypted OAuth tokens, Gmail address): Retained indefinitely until you disconnect the Gmail account from your dashboard or delete your SendLiberty account.
• Email send logs (recipient address, subject line, send status, timestamp): Retained indefinitely while your account exists, used for usage analytics and rate-limiting.
• API keys (hashed key, name, allowed origins): Retained indefinitely until you revoke them or delete your account.

We do not retain the body/content of any emails you send through SendLiberty.

6. Data Deletion

You can delete your SendLiberty account and all associated data at any time directly from your dashboard:

1. Go to Dashboard → Settings
2. Scroll to the Delete Account section
3. Click Delete Account and confirm

Deleting your account will permanently and immediately remove all of the following from our systems:

• Your SendLiberty user profile
• All connected Gmail account credentials (OAuth tokens)
• All email send logs
• All API keys

If you prefer to disconnect only a specific Gmail account without deleting your entire account, you can do so from Dashboard → Accounts.

If you experience any issues deleting your account, please contact us at [email protected] and we will process the deletion manually within 30 days.

7. Information Sharing

We do not share your personal information or API data with third parties except as necessary to provide the service (e.g., authenticating with Google/GitHub) or when required by law.

8. Security

We take reasonable measures to help protect information about you from loss, theft, misuse and unauthorized access, disclosure, alteration and destruction. Your API keys are hashed and encrypted at rest. Your Gmail OAuth tokens are encrypted using AES-256 encryption.