Privacy Policy

Last updated: September 15, 2026

KanbanMail ("KanbanMail", "we", "us") is a Chrome extension and Gmail add-on that turns emails you choose into cards on a sales pipeline, inside Gmail. This page explains exactly what data we access, why, and how you stay in control of it.

What we access, and why

When you connect your Google account, KanbanMail requests the following permissions:

• Basic profile (email address and name) — to identify your account and greet you by name. We do not request Gmail scopes. We do not read, label or modify your mailbox from our servers.

The Chrome extension and Gmail add-on only send us the contact and thread metadata you explicitly add to the board (sender, subject, snippet, thread id). We do not scan your inbox.

What we store

On our own server we store the minimum needed to run your board:

• Your pipeline columns and their names, colors and order.
• Cards: the associated contact, linked Gmail thread IDs, the opportunity fields you fill in (company, value, next step, notes) and any private notes you write.
• A session token of our own (not a Google token) so you stay signed in to KanbanMail.

We do not store the full content of your emails. The card keeps the subject, sender, snippet and a link so you can open the thread in Gmail.

What we don't do

• We do not sell, rent or share your data with third parties.
• We do not show ads, and we do not use your data for advertising.
• We do not use your Gmail content to train AI or machine-learning models.
• We do not use any third-party analytics or tracking scripts inside the extension.

Limited Use disclosure

KanbanMail's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data retention and security

Your data is retained for as long as your KanbanMail account is active. Data in transit is encrypted via HTTPS/TLS. Access to the production database is restricted to the KanbanMail maintainer.

Revoking access and deleting your data

You can revoke KanbanMail's access to your Google account at any time from myaccount.google.com/permissions. Your Gmail mailbox is not modified by KanbanMail.

To request full deletion of your KanbanMail data (columns, cards, notes), email us at support@kanbanmail.co and we'll delete it within 30 days.

Your rights under GDPR

If you're in the European Economic Area (or anywhere GDPR-equivalent rights apply), you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten").
• Restrict or object to certain processing.
• Port your data to another service in a structured, machine-readable format.
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.

We process your data on the basis of your consent (granted via Google's OAuth screen) and, for the core board functionality, the necessity to perform our contract with you (i.e., to provide the Service you signed up for). To exercise any of these rights, email support@kanbanmail.co. If you believe we haven't handled your data properly, you also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or your local supervisory authority.

Changes to this policy

If we make material changes to this policy, we'll update the date at the top of this page. Continued use of KanbanMail after a change constitutes acceptance of the updated policy.

Contact

Questions about this policy or your data? Write to support@kanbanmail.co.