Privacy Policy

1. Information We Collect

1.1 Account Information

When you sign up, we collect your email address and basic profile information through Google OAuth authentication. We do not store your Google password.

1.2 Email Data

With your explicit permission via Google OAuth, we access your Gmail data to provide our email management features. This includes:

• Email messages (sender, recipient, subject, body, timestamps)
• Email labels and categories
• Email thread structure
• Contact information from your Google Contacts

We request the following Gmail API scopes:

• Read your email messages and metadata
• Send email on your behalf
• Modify email labels and organization
• Create and remove Gmail filters for user-configured sender blocking
• Read your contacts

1.3 AI-Processed Data

If you enable AI features, we send portions of your email content to the AI provider you select—currently Anthropic (Claude) or OpenAI—for:

• Email priority classification
• Sender categorization and risk assessment
• Smart reply suggestions
• Email summarization

We configure provider requests to avoid persistent application state where supported. Under their standard commercial API terms, Anthropic and OpenAI may retain API inputs and outputs or abuse-monitoring logs for up to 30 days, subject to limited exceptions such as legal requirements, safety enforcement, or a separate zero-retention agreement. Their standard commercial API terms state that API customer content is not used to train general-purpose models unless the account holder explicitly opts in. If you supply your own provider API key, the settings and agreement for your provider account also apply.

1.4 Phone Number

If you opt into SMS alerts for urgent emails, we collect and verify your phone number. Your phone number is stored securely and used solely for delivering urgent email notifications.

1.5 Analytics Data

We use PostHog for product analytics. We collect:

• Feature usage patterns (which features you use, how often)
• Performance metrics
• Error reports
• Device type and browser information

We do not track your email content in analytics. Analytics data is associated with your user ID, not your personal information.

1.6 Client-Side Storage

We use your browser's local storage, cookies, and IndexedDB for:

• Authentication session tokens
• Email drafts (auto-saved locally for instant recovery)
• UI preferences and settings
• Cached email data for offline access and performance

2. How We Use Your Information

We use your information to:

• Display and organize your email inbox
• Apply AI-powered email prioritization and classification (when enabled)
• Send email on your behalf when you compose or reply
• Deliver SMS notifications for urgent emails (when enabled)
• Improve our product through aggregated, anonymized analytics
• Provide customer support

We do NOT:

• Sell your personal information or email data to third parties
• Use your email content for advertising
• Share your email content with other users
• Train AI models on your email data

3. Third-Party Services

Off Script Foundry, Inc. uses the following third-party services to operate Pigeon Email:

Each third-party service is bound by their own privacy policy and data processing agreements.

Anthropic's commercial API retention and training practices are described in its data-retention documentation and model-training documentation. OpenAI's commercial API retention and training practices are described in its data-controls documentation.

Off Script Foundry, Inc.'s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Data Retention

• Email data: Cached in our database while your account is active. We sync emails from the last 90 days. Older cached data may be periodically purged.
• Account data: Retained while your account is active.
• Analytics data: Retained for up to 12 months.
• SMS logs: Notification delivery logs are retained for 30 days.
• AI provider data: Under standard commercial API terms, providers may retain inputs, outputs, or abuse-monitoring logs for up to 30 days. A different period may apply if a provider account has approved zero-retention controls or if retention is required for legal or safety reasons.
• Deleted accounts: When you delete your account, we delete all associated data within 30 days.

5. Data Security

We protect your data using:

• Encryption in transit (TLS/HTTPS for all connections)
• Encryption at rest for stored data
• Row-level security policies ensuring users can only access their own data
• OAuth 2.0 for Gmail access (we never see your Google password)
• Secure token storage with automatic refresh
• Phone number verification with time-limited, hashed codes

6. Your Rights

You have the right to:

• Access: View all data we store about you through your account settings
• Revoke Gmail access: Disconnect your Gmail account at any time through Google Account settings or within Pigeon Email
• Disable AI features: Turn off all AI processing in your account settings
• Disable SMS alerts: Stop SMS notifications at any time by replying STOP or toggling off in settings
• Delete your account: Request complete account deletion, which removes all stored data
• Export: Download your data (email data remains accessible through Gmail directly)

7. Children's Privacy

Pigeon Email is not intended for users under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, please contact us so we can delete it.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice in the app or sending an email. Your continued use of Pigeon Email after changes constitutes acceptance of the updated policy.

9. Contact Us

This Privacy Policy is issued by Off Script Foundry, Inc. If you have questions about it or about your data, contact us at:

Off Script Foundry, Inc.
1248 W 700 S
Pleasant Grove, UT 84062
Email: contact@offscriptfoundry.com
Website: pigeonemail.ai