Privacy Policy

This policy covers SendSuite, available at www.sendsuite.us and as a Chrome extension.

Questions about this policy, or requests about your data, go to contact@sendsuite.us.

We keep only what SendSuite needs to work:

• Your Google account basics. Your name, email address and profile photo, received when you sign in with Google.
• Google OAuth tokens. Stored encrypted and used only to send email you ask SendSuite to send.
• Your sender profile. The sender name and signature you set in SendSuite.
• Templates and their attachments. What you write and upload in SendSuite.
• Remembered field values. Optional, and only for fields you mark “remember”.
• Send records. When you sent, which template, whether it succeeded or failed, and the message ID Gmail returns. Send records contain no recipient addresses and no email content.
• Sign-in sessions. A session cookie keeps you signed in. It is not used for tracking. Each session also records the IP address and browser (user agent) it was started from. A session stops working after about a week without use, and a daily clean-up deletes expired sessions. Signing out deletes it, and deleting your account deletes all of them.
• Sign-in request counts. To stop abuse, requests to the sign-in service (signing in, signing out and checking your session) are counted per IP address over 10-second windows. The counts are not linked to your account, and a daily clean-up deletes any count that hasn’t been used for a day.

• We can’t read your Gmail. The only Gmail permission SendSuite asks for is “send”.
• We don’t store the addresses you send to, and we don’t store the content of the emails you send.
• No ads and no tracking cookies. Page views are counted without cookies, as described under “Where your data lives”.

SendSuite's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

SendSuite asks for four permissions (scopes) when you sign in:

• openid, email and profile: to sign you in and show your name, email and photo.
• gmail.send: to send the emails you ask SendSuite to send, from your address. This permission cannot read, list or delete mail.

Data we receive from Google is:

• used only to provide and improve the features you see in SendSuite;
• not used for advertising, and not sold;
• not used to train AI models;
• not read by humans, except with your consent for support, for security purposes, or as required by law.

We use four services to run SendSuite:

• Vercel hosts the website and the app (United States).
• Neon hosts the database (United States).
• Google handles sign-in and sends your email through Gmail.
• Cloudflare Web Analytics counts page views on www.sendsuite.us: the page’s address, the site that linked to it, the visitor’s country, browser, operating system and device type, and how fast the page loaded. It uses no cookies or other browser storage and doesn’t fingerprint visitors. Page addresses in SendSuite never contain templates, recipient addresses or field values. The extension has no analytics.

We don’t share your data with anyone else.

The extension uses your signed-in SendSuite session and stores no passwords or tokens. It connects only to www.sendsuite.us and doesn’t read the pages you visit.

To open quickly, it keeps a copy of your templates in the extension’s own storage on your computer, and removes it when it finds you signed out or signed in with another account. What you type into a template (recipients and field values) stays in the browser’s session storage until the email is sent or the browser closes. When you send, those recipients and values go to SendSuite and to Gmail to build and send the email. SendSuite keeps only the values of fields you mark “remember”.

• Send records are deleted after 12 months.
• One-off attachments are deleted within 48 hours: a daily clean-up removes any that are more than 24 hours old.
• You can delete your account at any time in Settings. That deletes everything immediately and revokes SendSuite’s access to your Google account.
• You can also revoke access yourself at myaccount.google.com/permissions.

Data is encrypted in transit and at rest. Your Google tokens are encrypted and never reach your browser. Access to your templates is limited to your account.

SendSuite is not a HIPAA-covered service and does not sign business associate agreements (BAAs).

It is designed not to store recipient data or email content. Templates should not contain patient-specific information. Put that in fields, filled in when you send.

SendSuite is not for children under 13, and we don’t knowingly collect their data. If you think a child has signed up, write to us and we will delete the account.

If we change this policy, we will update the date at the top. For material changes, we will also tell you in the app before they take effect.