airletter

Privacy Policy

Updated September 28, 2026

This policy explains what data Airletter (the website and the Chrome extension) collects, why, where it is stored and how to delete it.

Data we receive

  • Google account data: email address, name, profile picture — when you sign in with Google.
  • Google access tokens. Stored encrypted and used only to send email and read the spreadsheets you select.
  • Campaign data: subject, body, attachments, recipient addresses and delivery statuses.
  • Payment data: plan, amount, payment status. We never receive or store card details — payments are processed by YooKassa and PayPal.
  • Server logs (IP address, request time) — for security and troubleshooting.

Access to Google data

Airletter only requests the permissions it needs:

  • Send email on your behalf (gmail.send) — to send campaign emails from your address. We do not read, modify or delete messages in your mailbox.
  • Read Google Sheets — to load recipient addresses from the spreadsheet you point to.
  • Basic profile (email, name) — to create your account.

Airletter's use and transfer of information received from Google APIs to any other app will adhere to Google API Services User Data Policy, including the Limited Use requirements. In particular, Google user data is only used to provide user-facing features of Airletter; is never used for advertising; is never sold; is not transferred to third parties except as necessary to provide the service or required by law; is not read by humans without your explicit consent, except for security purposes or to comply with the law; and is not used to train generalized AI models.

Who we share data with

We do not sell data or share it with advertising platforms. Data is processed only by providers the service cannot work without: our hosting provider, Google (sending via the Gmail API), YooKassa and PayPal (payments).

Storage and security

Data is transmitted over HTTPS only. Google tokens are encrypted (AES-256-GCM). Campaign data is kept while your account exists or until you ask us to delete it.

Cookies

The site only uses essential cookies: to keep you signed in and to remember your language. No advertising or analytics cookies.

Your rights

  • Request a copy of your data or its deletion — email [NEXT_PUBLIC_SUPPORT_EMAIL]. We handle requests within 30 days.
  • Revoke Airletter's access to your Google account at any time: myaccount.google.com/permissions.

Contact

Data protection questions: [NEXT_PUBLIC_SUPPORT_EMAIL].