Privacy Policy – Gmail Assistant SaaS

Effective date: February 16, 2026

ChatNexis (“we,” “our,” or “the Service”) is committed to protecting your personal information. This Privacy Policy explains how we collect, use, store, and secure your data when using our Gmail monitoring service.

Introduction

  • By accessing or using our Service, you acknowledge that you have read and understood this Privacy Policy.
  • This policy applies to all users of the Gmail Assistant SaaS, including free trial and paid subscribers.
  • It covers how we handle Gmail data, messaging integrations, and billing/subscription data.

1. Personal Data We Collect

  • Account Information: Name, email, and authentication credentials via Supabase.
  • Gmail Connection Data: OAuth tokens (read-only), Gmail account ID, and email metadata (subject, sender, timestamp) used for notifications.
  • Messaging Platform Data: Telegram ID or other identifiers required to deliver notifications.
  • Billing Information: Stored subscription status, plan type. Stripe handles all payment details.
  • Usage Data: App interactions, notifications delivered, device info (IP, browser type) for security purposes.

2. How We Use Personal Data

  • Provide and maintain the Service, including Gmail notifications.
  • Authenticate users and ensure secure access.
  • Manage subscriptions, free trials, and billing.
  • Analyze anonymized usage to improve the Service.
  • Send updates, support messages, and notifications regarding the Service.

3. How We Share Personal Data

  • Third-party service providers: Supabase, Stripe, Telegram, etc., for supporting the Service.
  • Affiliates or business transfers: merger, acquisition, restructuring.
  • Legal obligations: comply with laws, protect rights, safety, and property.
  • With your consent: features designed to share information with other users.

4. Retention

  • Data is retained only as long as necessary for Service functionality or legal obligations.
  • Account deletion triggers removal or anonymization of personal data.
  • Temporary data (logs, analytics) may be retained for a short period for performance and security purposes.

5. Security

  • OAuth tokens are encrypted (AES-256-GCM).
  • Supabase Row-Level Security ensures users can only access their own data.
  • Access to server credentials is restricted; clients never see sensitive keys.
  • We implement industry-standard measures, but no system is completely secure.

6. Your Rights and Choices

  • Access, correct, delete, or restrict processing of your personal data.
  • Withdraw consent where processing is based on consent.
  • Exercise rights via support@your-domain.com.
  • No automated decisions are made that impact legal rights.
  • We do not sell or share personal data for advertising purposes.

7. Privacy Policy Changes

  • We may update this Privacy Policy periodically.
  • Changes will be posted with an updated effective date.
  • Continuing to use the Service constitutes acceptance of the changes.

8. Contacting Us