Privacy Policy
Last updated May 9, 2026
This is a placeholder privacy policy. Final copy will be reviewed by counsel before launch. The shape below reflects what we actually do and intend to publish.
What we collect
Email metadata for messages you choose to track (sender, recipients, subject, gmail thread/message identifiers); open and click events recorded by our pixel and link redirect servers; user-agent and IP of the requesting client at open/click time; account information from your Google sign-in (email, name, profile picture).
What we do not collect
Email body content, attachments, contact lists, calendar data, or any Gmail content beyond the message you are sending. The Chrome extension never reads inbox messages.
Retention
Tracking data is retained for 12 months by default. Enterprise customers may configure custom retention. You may request export or deletion at any time via account settings.
Subprocessors
Google (OAuth and identity verification), Stripe (billing), Northflank (application hosting), and our managed Postgres provider. A current list is maintained on this page and updated when subprocessors change.
Your rights
EU and UK users have rights under the GDPR including access, rectification, erasure, and portability. California residents have rights under the CCPA. Contact privacy@readsignal.app.