Privacy Policy

1. Overview

AuraMail is a placement-email assistant for students. It connects to Google only after you authorize it, finds relevant placement messages, extracts useful details such as roles and deadlines, and lets you organize those opportunities.

2. Information we access

Depending on the features you use, AuraMail accesses:

• Google account information: your name, email address, and Google account identifier for authentication.
• Gmail data: message sender, subject, date, labels, snippets, body content, and relevant attachment metadata for placement-related messages. AuraMail requests read-only Gmail access and does not send, edit, or delete your Gmail messages.
• Google Calendar data: calendar information needed to display and create, update, or remove events when you use the calendar feature.
• Session information: application session tokens and the Google authorization token needed to keep your connection active and perform the requested Gmail and Calendar operations.

3. How we use Google user data

We use this data only to:

• sign you in and maintain your AuraMail session;
• find and display placement-related email;
• create structured summaries and extract roles, eligibility, locations, compensation, deadlines, links, and other details from the email body;
• show your saved opportunities and email details in AuraMail;
• create or manage Calendar events when you request that action;
• secure, maintain, debug, and improve the service.

AuraMail does not use Google user data for advertising, sell it, or use it to build a separate profile about you.

4. AI processing and sharing

To provide email analysis, relevant email content is sent to the OpenAI API as a service provider. OpenAI processes that content to return the structured analysis requested by AuraMail. The returned summary and extracted fields are stored with your AuraMail account.

We do not disclose Google user data to third parties for independent advertising or sale. We share the minimum data needed with service providers that operate AuraMail, including Google APIs, OpenAI, Vercel, Render, and Neon. Those providers process data to deliver, host, secure, or support the service and not for AuraMail advertising.

Our use of Google user data is intended to comply with the Google API Services User Data Policy and its Limited Use requirements.

5. Storage and security

AuraMail stores account identifiers, session and authorization tokens, email summaries, extracted fields, and the relevant email description needed to show the service you requested. Production traffic uses HTTPS. We use access controls and server-side storage for credentials and apply reasonable technical and organizational safeguards to protect the information we process.

No internet service can guarantee absolute security. You should protect your Google account and sign out of shared devices.

6. Retention and deletion

We retain account and summarized email data while your AuraMail account is active or as needed to provide the service. You can revoke AuraMail's Google access at any time from your Google Account security settings. To request deletion of your AuraMail account, tokens, summaries, and associated data, contact us through the public support channel linked below. We may retain limited information where required for security, fraud prevention, legal compliance, or backup recovery.

7. Third-party services and links

AuraMail relies on Google APIs, OpenAI, and hosting and database providers. Their own privacy policies govern their processing of information under their services. AuraMail may display links from email messages; those external sites have their own terms and privacy practices.

8. Changes to this policy

We may update this policy when AuraMail's data practices change or when required by law. We will update the date above and publish the revised policy at this same URL. If a change materially affects how we use Google user data, we will provide an appropriate notice.