MailBeaver Privacy Policy

Last updated: October 29, 2026

MailBeaver is a Chrome extension that gives you a daily brief of your Gmail and helps you clean up clutter. This policy explains what data MailBeaver accesses, what it does with that data, and what it never does.

The short version:

• There is no MailBeaver server. Your email data is processed in your own browser and stored only there.
• The AI provider you choose (Google Gemini, OpenAI or Anthropic Claude) receives the sender, subject and a short preview of each email, so it can sort and summarize them. MailBeaver never fetches full message bodies.
• We don't sell your data, show ads, or use your data for anything other than the features you use.

1. Data MailBeaver accesses

When you connect a Gmail account, you grant MailBeaver the Google permission https://www.googleapis.com/auth/gmail.modify. MailBeaver uses it to access the following.

Email metadata. For each message in your brief, scans and cleanup, MailBeaver reads:

• sender name and address
• recipients (To and Cc), so you can invite the people on an email to a calendar event
• subject
• Gmail's short preview text (the "snippet," roughly 200 characters)
• date
• labels, such as Inbox, Unread and Starred
• message size
• the List-Unsubscribe header

MailBeaver does not download full message bodies or attachments.

Actions you take or set up. Using the same permission, MailBeaver:

• adds or removes labels (star, mark read, archive, snooze)
• moves messages to Trash and restores them from Trash
• sends an unsubscribe email when a sender only offers unsubscribe by email; this happens only when you click Unsubscribe

MailBeaver cannot permanently delete email. Everything it removes goes to Gmail's Trash and can be restored.

Your Google account email address is used to tell your connected accounts apart.

Google Tasks (optional). If you add a task from MailBeaver, it first asks for a second Google permission, https://www.googleapis.com/auth/tasks. MailBeaver uses it to:

• list your task lists, so you can choose where a task goes
• create the tasks you add, with the title, due date and notes you enter, and a link back to the email
• mark those tasks done or not done when you tick them in MailBeaver
• read the lists it added tasks to, to pick up changes you make to those tasks in Google Tasks; other tasks in those lists are read but not stored or used

MailBeaver doesn't change or delete tasks it didn't create. You can stop it using Google Tasks at any time in Settings → Google services.

Google Calendar. MailBeaver has no Calendar permission. Add to calendar opens Google Calendar's own "new event" page with the details filled in, including any guests you chose; nothing is saved until you save it there.

2. How the data is used

MailBeaver uses this data only to provide its features:

• the daily brief: TL;DR, needs attention, actions, the rest
• cleanup suggestions and automatic cleanup
• your rules
• reminders, snooze, bills and deadlines
• tasks you add to Google Tasks, and events you add to Google Calendar
• ticking off a task, bill or reminder when a later email shows it's finished; you can undo this, or turn it off in Settings
• follow-up tracking
• VIP alerts
• the noisy-senders view
• the storage cleaner
• the weekly report
• learning from your clicks (for example, which senders you always delete) to improve these features for you

3. Where the data is stored

Everything is stored in your browser's extension storage (chrome.storage) on your device:

• email metadata for your recent briefs
• your feedback and rules
• your settings, including your AI API key
• Gmail access tokens, which are kept only for the current browser session

MailBeaver has no server and no database of its own, and it does not copy your data anywhere else, except as described in section 4.

You can delete MailBeaver's data at any time:

• Settings → Gmail accounts → Remove deletes that account's data and revokes its access token.
• Uninstalling the extension deletes all of its stored data.
• Google Account permissions lets you revoke access at any time.

4. Who else receives data

We do not sell or rent your data. We don't use it for advertising, for credit or lending decisions, or for training AI models. No MailBeaver person reads your email.

5. Google API Services User Data Policy

MailBeaver's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• Gmail and Google Tasks data is used only to provide or improve the user-facing features described above.
• It is transferred to third parties only as described in section 4: to provide those features, with your action or setup, or as required by law.
• It is never used for advertising.
• No humans read it, unless you give explicit consent for a specific message (for example, when you ask for support), it's needed for security purposes, or it's required by law.

6. Security

• Encrypted connections: all requests use HTTPS.
• Tokens: Gmail access tokens are short-lived and kept in session storage.
• Your AI key: stored only in your browser and sent only to the provider it belongs to.

7. Children

MailBeaver is not directed at children under 13 and does not knowingly collect their data.

8. Changes

If this policy changes, we'll update the date above. For significant changes, we'll also tell you inside the extension.

9. Contact

Questions or requests: hello@hummingbits.com · https://mailbeaver.hummingbits.com