Privacy Policy

Effective Date: September 16, 2025

Gomaily ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Google Sheets Add-on for mail merge functionality.

What We Access

Gomaily operates entirely within your Google account using Google Apps Script and Google APIs. We may access:

Google Sheets Data

Scope: https://www.googleapis.com/auth/spreadsheets
Purpose: To read contact information, email templates, and merge data from your active spreadsheet
Data Accessed: Cell values, sheet structure, and formatting from the spreadsheet where the add-on is used
Note: We do not access your full Drive or other files — only the active spreadsheet where the add-on is used

Gmail Data

Scope: https://www.googleapis.com/auth/gmail.send

Purpose: To send personalized emails through your Gmail account as part of the mail merge functionality

Data Accessed: Send emails on your behalf using your Gmail account

Scope: https://www.googleapis.com/auth/gmail.readonly

Purpose: To verify email templates and check email sending status

Data Accessed: Read access to your Gmail messages for template verification and delivery confirmation

Scope: https://www.googleapis.com/auth/gmail.modify

Purpose: To manage email drafts and organize sent emails during the mail merge process

Data Accessed: Create, modify, and delete email drafts; add labels to sent emails

Scope: https://www.googleapis.com/auth/gmail.compose

Purpose: To create and format email drafts with personalized content from your spreadsheet data

Data Accessed: Compose new email messages with merged data

How We Use Your Data

We use your data only for:

Reading contact information and email templates from your Google Sheets
Personalizing email content by merging spreadsheet data
Sending emails through your Gmail account
Tracking email delivery status and managing sent emails
Providing mail merge functionality within the Google Sheets environment

Data Protection and Security

Data Storage

No External Storage: We do not store any of your data on external servers
Local Processing: All data processing occurs within Google's secure environment using Google Apps Script
Session-Based: Data is only accessed during active use of the add-on and is not retained between sessions

Security Measures

Encryption: All data transmission uses HTTPS encryption
Google Security: Your data remains within Google's secure infrastructure and follows Google's security policies
Access Controls: The add-on only accesses data necessary for its functionality and operates under your Google account permissions
No Third-Party Sharing: We do not share your data with any third parties

Sensitive Data Handling

Email Content: Email content and recipient information are processed securely within Google's environment
Contact Information: Personal contact details from your spreadsheets are handled with appropriate security measures
Authentication: All API access uses secure OAuth 2.0 authentication through Google

Your Rights and Control

Access Control: You can revoke the add-on's access to your data at any time through your Google Account settings
Data Deletion: You can delete the add-on, which will remove its access to your data
Transparency: You can review all permissions requested by the add-on before granting access

Scope Justification

Required Scopes Explanation

Gmail Send (gmail.send)

Essential for the core mail merge functionality - sending personalized emails to your contacts.

Gmail Read (gmail.readonly)

Necessary for:

Verifying email templates and formatting
Checking email delivery status
Ensuring proper email composition

Gmail Modify (gmail.modify)

Required for:

Managing email drafts during the merge process
Organizing sent emails with appropriate labels
Handling email status updates

Gmail Compose (gmail.compose)

Needed for:

Creating email drafts with merged data
Formatting emails with personalized content
Preparing emails before sending

Spreadsheets (spreadsheets)