Privacy Policy

Overview

Cleared ("we," "us," or "our") is an email triage tool that helps you process your Gmail inbox one email at a time. We take your privacy seriously and are committed to being transparent about the data we access, how we use it, and how we protect it.

What Gmail Data We Access

When you connect your Google account, we request the following Gmail permissions:

• Read email messages and threads - to display your inbox emails one at a time in the triage interface.
• Modify email labels - to archive emails (remove the INBOX label) and apply the "cleared" label to processed emails.
• Send email on your behalf - only when you explicitly compose and send a reply through our interface.

We request the gmail.modify scope, which is the minimum scope required for the triage actions described above (archive, label, reply).

How We Use Your Data

• Email display only. We fetch and display your email content in real time so you can read and act on it. We do not store, copy, index, or cache the content of your emails on our servers.
• Triage actions. When you archive, reply to, or skip an email, we send the corresponding API request to Gmail on your behalf. These actions are performed directly through the Gmail API.
• No training or analytics on email content. We do not use your email content for advertising, machine learning training, analytics, or any purpose other than displaying it to you.

What We Store

We store the minimum data required to maintain your account:

• Account information: your name, email address, and profile picture (provided by Google during sign-in).
• Authentication tokens: OAuth access and refresh tokens required to connect to Gmail on your behalf. These are stored encrypted and are never exposed to client-side code.
• Subscription data: billing status and plan information if you have a paid subscription.

We do not store email content, email metadata (subjects, senders, recipients), attachment data, or any other Gmail data on our servers.

Data Security

We use industry-standard security practices to protect your data, including encrypted connections (HTTPS/TLS), secure token storage, and regular security audits. Access tokens are never exposed to the browser. All communication with Gmail happens server-side through the official Gmail API.

Third-Party Services

We use the following third-party services to operate Cleared:

• Google OAuth and Gmail API - for authentication and email access.
• Neon (PostgreSQL) - for database hosting.
• Railway - for application hosting.

We do not sell, share, or transfer your data to any other third parties.

How to Revoke Access

You can revoke Cleared's access to your Gmail at any time:

1. Go to your Google Account permissions page.
2. Find "Cleared" in the list of apps with access.
3. Click "Remove Access."

Once you revoke access, we will no longer be able to access your Gmail data. Your account data (name, email) will be retained unless you request deletion.

Data Deletion

To request deletion of your account and all associated data, please contact us at [email protected]. We will process deletion requests within 30 days.

Children's Privacy

Cleared is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13.

Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

Contact

If you have questions about this privacy policy or your data, contact us at [email protected].