Privacy Policy

Tgmailreader
Last updated: September 15, 2026

This Privacy Policy describes how Tgmailreader ("the App", "we", "us") collects, uses, and protects information when you use our Telegram bot (@Tgmailreaderbot) and the website at https://telegramemailbot.duckdns.org.

1. What the App does

The App lets you connect your Gmail account to a Telegram bot so you can:

• Receive Gmail snippet previews of new inbox emails in Telegram
• Read, reply to, archive, delete, and mark emails as important
• Compose and send new emails from Telegram
• Search your mail by sender or content (spam and trash excluded)
• Ask the in-bot assistant how the bot works, or send feedback to the developer

2. Information we collect

When you use the App, we may store:

• Your Telegram user ID and chat ID
• Gmail OAuth tokens (access and refresh tokens) needed to access your mailbox
• Gmail message IDs already delivered to you (to avoid duplicate notifications)
• Your timezone preference for displaying email dates
• Your selected Gmail inbox category filters
• Recent email addresses you used when composing messages

Automatic inbox checks fetch Gmail metadata and a short snippet only (sender, subject, date, preview). Full message body and attachments are fetched from Gmail only when you tap Read full or Attachments. Questions sent with /ask are answered by the in-bot assistant and are not stored; if an AI API key is configured, the question may be sent to that provider. Messages sent with /feedback are forwarded to the developer. We do not sell your data.

3. Google user data

The App uses Google OAuth and the Gmail API. With your permission, we request these Google scopes:

• gmail.modify — read inbox mail and change labels (archive, delete, mark important)
• gmail.compose — create drafts and replies
• gmail.send — send email on your behalf

Google user data is used only to provide the features above. We do not use Gmail data for advertising, and we do not transfer it to third parties except as needed to operate the service (Google APIs, Telegram Bot API, and our hosting provider).

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Where data is stored

Account data and OAuth tokens are stored in a private SQLite database on our server. Data is not shared with other users of the bot.

5. How long we keep data

• OAuth tokens — until you disconnect Gmail or revoke access
• Processed message IDs — until you disconnect or data is cleared
• Preferences (timezone, categories) — until you disconnect

6. How to disconnect or delete your data

You can stop the App at any time:

• Send /disconnect in the Telegram bot
• Revoke access in your Google Account permissions

After disconnecting, your Gmail tokens, processed message IDs, recent contacts, inbox category filters, callback tokens, and timezone preference are removed from our database. We also try to revoke the Google OAuth grant; if that request fails, revoke access yourself in Google Account permissions.

7. Security

We use HTTPS for all web traffic. OAuth tokens are stored server-side and are not exposed to other Telegram users. Only you can use the inline buttons attached to your email notifications.

8. Children

The App is not intended for users under 13 years of age.

9. Changes

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest version.

10. Contact

If you have questions about this Privacy Policy or your data, contact us at elijah.rozenberg@gmail.com or through the Telegram bot.