Overview
TextForge ("we", "our", or "us") is an email gateway service that enables AI agents to draft
emails on your behalf, subject to your approval before sending. This privacy policy explains
how we collect, use, and protect your information.
Information We Collect
Google Account Information
When you sign in with Google, we receive:
- Your email address
- Your display name
- Your Google profile picture URL
- OAuth tokens to access Gmail on your behalf
Email Data
What we store:
- Email thread metadata (subject, participants, timestamps)
- Draft emails you create through our service
- Attachments you upload to drafts
What we do NOT store:
- Inbound email message content (fetched on-demand from Gmail when you view it)
- Inbound email attachments (streamed directly from Gmail when you download them)
This pass-through design means your email content remains in Gmail. We only store
emails and attachments that you explicitly create through TextForge.
Usage Data
We collect:
- API token usage and audit logs
- Draft approval/rejection history
- Application logs for troubleshooting
How We Use Your Information
We use your information to:
- Authenticate you and maintain your session
- Sync your email threads for AI context
- Send emails on your behalf (only after your explicit approval)
- Provide audit trails for compliance and security
- Improve and troubleshoot our service
Data Storage and Security
- All data is stored in encrypted databases
- OAuth refresh tokens are encrypted at rest
- API tokens are hashed (never stored in plaintext)
- All connections use HTTPS/TLS encryption
- We do not sell or share your data with third parties
- Email content stays in Gmail - we use a pass-through design where inbound
email content and attachments are fetched directly from Gmail when needed, rather than
stored on our servers
Gmail Access
TextForge accesses your Gmail account with the following permissions:
- Read your email threads - So your AI agent has context when drafting replies
- Send emails on your behalf - Only after you explicitly approve each one
We do not access your Google Drive, Calendar, Contacts, or any other Google service.
You can revoke access at any time from
Google Account Settings.
Data Retention
- Email data is retained while your account is active
- When you cancel your subscription, your data is automatically deleted 7 days after the billing period ends
- You can immediately purge all data from Settings at any time after cancellation
- Audit logs are retained while your account is active
Your Rights
You have the right to:
- Access your data
- Delete your account and all associated data
- Revoke Gmail access at any time via Google Account Settings
- Request information about your stored data
Contact Us
For privacy-related questions or concerns, contact us at:
[email protected]
Changes to This Policy
We may update this privacy policy from time to time. We will notify you of any
significant changes by posting a notice on our website.