Privacy Policy

Last updated: September 30, 2026

Pastor Mailer ("the app") is an internal tool that sends documents by email to a maintained contact list on behalf of the person operating it (the "sender"). This policy explains how the app handles data when a sender connects a Google/Gmail account.

What we access

When a sender connects a Gmail or Google Workspace account, the app requests the gmail.send scope only. This scope allows the app to send email messages as that account. It does not grant access to read, search, download, or otherwise view the contents of the connected mailbox, its contacts, or any other Google account data.

What we store

The app stores, on infrastructure controlled by the sender:

• The connected account's email address, and an OAuth refresh token used solely to obtain short-lived access tokens for sending mail as that account.
• A log of send activity (recipient address, subject, timestamp, and delivery status) for the sender's own record-keeping.
• Contact list data (recipient email addresses) that the sender uploads directly, used only to address outgoing messages.

No mailbox content, contact list, or account data is transmitted to any third party. Nothing is sold, shared for advertising, or used for any purpose other than sending the messages the sender composes.

Google user data and Limited Use

The app's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail data is used exclusively to send messages the sender explicitly composes and authorizes, is never used for advertising, and is never used to train generalized AI/ML models.

Revoking access

A sender can disconnect a connected account at any time from the app's admin dashboard, or directly at Google Account › Security › Third-party access, which immediately invalidates the app's ability to send on that account's behalf.

Contact

Questions about this policy or a connected account can be sent to eminne.ebong@miva.edu.ng.