Privacy Policy

1. Introduction

EmailOnText ("we", "our", or "us") operates an email-to-SMS forwarding service. This Privacy Policy explains what personal data we collect, how we use it, and your rights regarding that data. By using EmailOnText you agree to this policy.

2. Data We Collect

• Account information: Your name and email address when you register.
• Gmail OAuth credentials: An OAuth refresh token that lets us access your Gmail on your behalf. This token is stored encrypted with AES-256-GCM and is never shared with third parties beyond what is required to operate the service.
• Email content: We read incoming emails transiently to generate an SMS summary. Email bodies are not stored after the summary is sent.
• Phone numbers: The mobile number you link to receive SMS messages.
• Payment information: Billing is handled entirely by Stripe. We never see or store your card number — only a Stripe customer ID and subscription ID.

3. How We Use Your Data

• Read your Gmail to detect new emails and generate SMS summaries.
• Deliver those summaries to your verified phone number via SMS.
• Allow you to reply to or compose emails by sending SMS commands.
• Process your monthly subscription payment.
• Send service-related notifications (e.g., verification codes).

EmailOnText's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data to provide and improve the user-facing email-to-SMS features described above.
• We do not transfer Google user data to others except as necessary to provide these features, to comply with applicable law, or as part of a merger or acquisition with your explicit consent.
• We do not use Google user data for serving advertisements, and we never sell it.
• We do not allow humans to read your Gmail data, except: with your affirmative consent for specific messages, where necessary for security purposes (such as investigating abuse), to comply with applicable law, or where the data has been aggregated and anonymized. Email content is processed transiently and automatically to produce SMS summaries.

4. Third-Party Services

We share data with the following third parties only as necessary to operate the service:

• Google LLC — Gmail API access via OAuth 2.0.
• OpenAI, Inc. — Email content is sent to OpenAI to generate a plain-text summary. OpenAI processes this data under their own privacy policy.
• SignalWire, Inc. — Delivers SMS messages to your phone number.
• Stripe, Inc. — Processes subscription payments securely.

We do not sell your data to any third party.

5. Data Retention

• Gmail refresh tokens are deleted immediately when you disconnect your Gmail account.
• Phone numbers are retained until you delete them from your account.
• Email summaries sent via SMS are not stored on our servers after delivery.
• Account data is retained until you request account deletion.

6. Security

Gmail refresh tokens are encrypted at rest using AES-256-GCM before being stored in our database. We use HTTPS for all data in transit. Access to production systems is restricted to authorised personnel.

7. Your Rights

You may at any time:

• Disconnect your Gmail account, which revokes our access and deletes your stored token.
• Remove your phone number from your account.
• Cancel your subscription and request full account deletion.

To exercise these rights, use the controls in your dashboard or contact us at the address below.

8. Children's Privacy

EmailOnText is not directed at children under 13. We do not knowingly collect personal information from children.

9. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes via email or an in-app notice. Continued use of the service after the effective date constitutes acceptance of the updated policy.

10. Contact

Questions or requests regarding this Privacy Policy should be sent to support@emailontext.com.