MailPet Privacy Policy

Last updated: November 9, 2026

What MailPet is

MailPet is a Windows desktop application: a calm desktop companion that helps you notice and handle new email. MailPet supports Microsoft email accounts and Gmail accounts. This policy describes how the current MailPet implementation handles your information.

Connecting your account

MailPet connects to your email account using the provider’s official OAuth sign-in — Microsoft OAuth for Microsoft accounts and Google OAuth for Gmail accounts. You sign in with the provider, in your browser, and approve the permissions MailPet requests.

MailPet does not collect, ask for, or store your email password.

Permissions MailPet requests

Gmail permissions

• gmail.readonly — to detect new email and, when you choose View or Reply, to read the message you opened.
• gmail.send — to send a reply only when you write one and choose to send it.

Microsoft permissions

• User.Read — to identify the connected account.
• Mail.ReadWrite — to detect new email and read messages you choose to open.
• Mail.Send — to send a reply only when you write one and choose to send it.

MailPet connects one active provider and account at a time. You can switch between Microsoft and Gmail, and you can disconnect at any time.

For transparency: the MailPet Windows application includes Google’s Desktop OAuth client identifier and its matching client configuration, as is normal for an installed desktop (public client) application. These identify MailPet’s OAuth client; they are not your password or your tokens, and they are never shown as settings you need to manage. Your own authorization is protected by OAuth with PKCE, and your tokens stay protected on your device as described below.

How your data is used

• Detecting new email. MailPet polls your connected account for new messages and baselines on first connection, so existing mail is not replayed as new.
• Showing a notification. When new email arrives, MailPet shows a delivery card with a short, safe summary.
• View. The full body of a message is fetched only when you actively choose View.
• Reply. When you write a reply and choose to send it, the reply is sent directly to the email provider through your connected account.
• Dismiss. Dismiss only affects what MailPet displays. It does not delete, archive, or otherwise change the email in your mailbox.

Where data is stored

MailPet is local-first. The following are stored only on your own Windows device, under your Windows user account:

• OAuth tokens and provider connection state, protected using Windows current-user protection mechanisms (DPAPI-protected stores and the Microsoft/MSAL secure cache).
• For Gmail, the local sync cursor (historyId) and a limited set of message de-duplication state.
• Your selected-sender list and ordinary preferences such as language, character position, and unread-count mode.

Email content

Email bodies are read on demand only, when you choose View or Reply, and are processed in memory for that interaction. Message bodies are not persisted to MailPet logs. Reply content you write is sent directly to the corresponding email provider (Microsoft Graph or the Gmail API) for delivery.

No MailPet email server

MailPet currently has no email content server of its own. The MailPet desktop application communicates directly with Microsoft Graph or with Google OAuth and the Gmail API. Your email does not pass through, and is not stored on, a MailPet server.

Analytics, advertising, and data sale

The current MailPet implementation contains no analytics or telemetry system. MailPet does not sell user data. Google user data is not used for advertising, credit assessment, data brokerage, or training AI models.

Logs

MailPet keeps a limited local runtime log of operational status and safe error categories. The log is not intended to record tokens, email addresses, senders, subjects, message bodies, or reply content.

Sharing

MailPet does not sell or disclose Google user data to third parties. Data is communicated only with Google or Microsoft, as needed to provide the email features you actively use, as described in this policy.

Retention, disconnect, and uninstall

• Disconnect removes the current provider’s local authentication and sync state from your device.
• Uninstall removes the application and its authentication state.
• Some ordinary, non-sensitive preferences may remain in your Windows local application data after disconnect or uninstall, until you delete them manually or a formal cleanup option is provided in a future version.

Google Limited Use

“MailPet’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.”

Contact

For questions about MailPet or this policy, contact MailPet Support at support@mailpetai.com.