Privacy policy

Last updated 29 August 2026.

Controller

Simon Leischnig
Karl-Liebknecht-Str. 33
07749 Jena, Thüringen, Germany

Contact: balconycoder@gmail.com

What mailauto accesses

Only the mailbox you connect, and only after you authorize it. With that authorization mailauto reads the messages in that mailbox — senders, recipients, subjects, dates, message bodies and attachments — and can send messages from it on your behalf.

mailauto is connected by the owner of a mailbox, for their own mailbox. It is not used to reach anyone else's account.

What it does with it

mailauto stores that mail in a local database, so that the automation you have agreed to can work on it. That is the whole function of this application: it fetches and stores, and it sends what you have approved.

Further processing

Any processing beyond fetching, storing and sending is agreed with you individually beforehand, and only what is agreed is carried out. Where such an agreement involves an external service — for example an AI provider — that service is named in the agreement before anything is sent to it. Without such an agreement no message content leaves the storage described here.

Where it is stored, and for how long

On self-hosted infrastructure in Germany. Stored mail is kept until you ask for it to be deleted, and is then deleted.

What is never done

Google user data

Where the connected mailbox is a Google account, mailauto's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Your control

You can withdraw mailauto's access at any time: for a Google account at myaccount.google.com/permissions, for other providers by changing the password or revoking the credential you issued. Withdrawal stops all further access immediately.

Your rights

Under the GDPR you may request access to the data held about you, its correction or deletion, and restriction of its processing; you may object to processing and request a copy of your data. You may also lodge a complaint with a data protection supervisory authority. Write to the address above.