MailroomPrivacy Policy
Effective 5 October 2026
Mailroom is a Mac app made by Bussgrow ("we", "us"). This policy explains what data Mailroom accesses, how it is used, where it is kept, who it is shared with, and how you delete it.
In short: Mailroom talks directly to Google from your Mac. Your mail, contacts and calendar data go only between Google and your Mac, and are cached only on your Mac. We run no servers that receive your data, we have no analytics or advertising, and we never sell, share or read your data.
Google user data Mailroom accesses
When you sign in with Google, Mailroom asks for the permissions below. It uses each one only for the features listed.
| Permission (scope) | Data accessed | How Mailroom uses it |
|---|---|---|
openid, email, profile |
Your Google account's email address, name and profile picture link | Identifying which account you signed in with, and showing its name in Settings ▸ Accounts. The profile picture is not downloaded. |
gmail.modify |
Your Gmail messages, threads, attachments, drafts and labels | Showing and searching your mail; sending messages and replies; saving drafts; applying and removing labels; archiving; moving to Trash; Snooze (a "Snoozed" label); Send Later (a draft that Mailroom sends at the chosen time); Follow-up Reminders; Screener; Sender Cleanup; Privacy Report and Link Safety. Mailroom never permanently deletes your mail. |
gmail.settings.basic |
Your Gmail filters, vacation responder, and send-as addresses with their signatures | Viewing and editing them in Settings ▸ Filters, Vacation and Signatures; creating the filters that Screener's Block and Sender Cleanup's Auto-Archive add; and choosing the right "From" address and signature when you write. |
contacts.readonly, contacts.other.readonly |
Names and email addresses in your Google Contacts and "Other contacts" | Suggesting addresses as you type in the To, Cc and Bcc fields. What you type is sent to Google to search your contacts. Results are kept in memory only and are not saved. |
calendar.events.owned |
Events on your primary Google Calendar | When you open a calendar invitation: finding the matching event, showing that day's agenda, and saving your RSVP when you choose Yes, Maybe or No. Google then notifies the organizer, as it does when you RSVP in Google Calendar. |
Limited Use of Google user data
Mailroom's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of information received from Google Workspace APIs will adhere to the Google Workspace API User Data and Developer Policy, including the Limited Use requirements.
In particular:
- Google user data is used only to provide and improve the user-facing features described above, which you can see and use in the app.
- Google user data is not transferred to anyone, except as needed to provide those features at your request (for example, sending a message you wrote to its recipients through Gmail), to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you.
- Google user data is never used for advertising, including personalized, retargeted or interest-based advertising.
- Google user data is never sold, and is never used to determine creditworthiness or for lending.
- Google user data is never used to develop, improve or train generalized or non-personalized AI or machine-learning models.
- No person reads your Google user data. It never leaves the path between Google and your Mac, so we have no access to it.
Where your data is stored
Mailroom stores data only on your Mac, inside the app's sandboxed container:
- Sign-in: a Google refresh token for each account, kept in the macOS Keychain. Short-lived access tokens are kept in memory only.
- Mail cache: the message list (headers and short previews), your labels, and the conversations you've opened, so the app opens quickly and works offline. Older cached conversations are removed automatically.
- App features: your snoozes, scheduled messages, follow-up reminders, Screener's allowed and blocked senders, Split Inbox tabs, profiles, quick replies, messages waiting to be sent while you're offline, and Privacy Report entries (the sender, subject, date and trackers found in tracked messages you opened).
- Suggestions: how often you've written to each address from each account, used to rank address suggestions.
- Attachments: attachments you open, preview or drag out are copied to the app's temporary folder, which macOS also clears automatically. Attachments you save go where you choose.
- Preferences: your account list (email address, name, colour, notification setting) and app settings.
Mailroom does not sync this data to iCloud or to any server.
Other data
Images in emails
Like other mail apps, when you open a message that contains remote images, your Mac downloads them directly from the sender's servers. The sender's server can see your IP address and that the image was loaded. To limit this, Mailroom blocks tracking pixels and images from known tracking services by default. You can stop all remote images from loading by turning off Load remote images in messages in Settings ▸ General ▸ Privacy; a Load Images button then appears on each message. The message view runs with scripts disabled and stores no cookies.
Unsubscribing
When you click Unsubscribe in Sender Cleanup, Mailroom sends the standard one-click unsubscribe request to the address the sender provided in the message. If the sender only offers a web page, it opens in your browser; if it offers an email address, Mailroom opens a pre-filled message for you to send. Nothing is sent unless you click Unsubscribe.
Apple Contacts
If you allow it, Mailroom reads your Apple Contacts on your Mac to suggest addresses and, when you first turn on Screener, to approve people you already know. Contacts are read on demand, kept in memory, and never uploaded.
Purchases
Mailroom Pro is sold through the Mac App Store. Apple processes the payment; we never receive your payment details. The app only checks with Apple whether your Apple ID has an active purchase.
Analytics and advertising
Mailroom contains no analytics, crash-reporting, tracking or advertising code, and no third-party SDKs.
Who your data is shared with
No one. The only services Mailroom contacts are:
- Google, to sign you in and to read and change your mail, settings, contacts and calendar as described above.
- Apple, for App Store purchases.
- Senders' servers, only to load images in messages you open (as described above) and to unsubscribe when you ask.
Links you click in emails open in your default web browser.
How your data is protected
- All connections to Google and Apple use HTTPS (TLS encryption).
- Sign-in uses Google's own sign-in page in a secure system window, with PKCE. Mailroom never sees your Google password.
- Refresh tokens are kept in the macOS Keychain.
- The app runs in the macOS App Sandbox, so its data is kept in its own container, separate from other apps.
- Emails are displayed in an isolated view with scripts disabled and no stored cookies.
Retention and deleting your data
Mailroom keeps cached data only while the account is added to the app. You can delete it at any time; Delete your data has step-by-step instructions.
- Remove an account: in Mailroom, open Settings ▸ Accounts, select the account, click −, then Remove Account. Mailroom revokes its access to your Google account, deletes the sign-in token from the Keychain, and deletes everything it stored for that account on your Mac: cached mail, opened attachments, snoozes, scheduled messages, follow-ups, Screener lists, Privacy Report entries and address-suggestion history. It also clears that account's notifications from Notification Center.
- Revoke access from Google: you can also remove Mailroom's access at any time at myaccount.google.com/permissions.
- Delete everything: deleting the Mailroom app removes the rest of its data from your Mac. What's left after removing your accounts isn't tied to any account: your preferences, Split Inbox tabs and profiles.
Removing an account deletes nothing from Gmail. Anything Mailroom created inside your mailbox, such as the "Snoozed" and "Screener" labels or the filters made by Screener and Sender Cleanup, stays in Gmail until you delete it there.
Because we hold none of your data on our side, there is nothing for us to delete on request; the steps above remove everything. If you have questions, contact us below.
Children
Mailroom is not directed to children under 13, and we do not knowingly collect personal information from them.
Changes to this policy
If we change this policy, we will update it on this page and change the effective date above. If a change affects how Google user data is used, we will ask for your consent in the app before it takes effect.
Contact
For questions or privacy requests, email pushersatlimits@gmail.com.