Privacy Policy

Last updated: September 24, 2026

Email Hero is an email triage service operated by Glass Labs ("we", "us"). It helps you manage your Gmail by sorting new mail, and on request the last thirty days of it, into categories using Gmail labels, and it always leaves Gmail as the place where you read, reply, and search your mail. This policy explains what Google user data Email Hero accesses, how we use it, and the choices you have.

What Email Hero accesses

When you connect a Gmail account, you grant Email Hero access through Google's OAuth system with the gmail.modify scope. That access lets Email Hero:

Read message metadata (sender, subject, headers, labels, read/unread state) and message content;
Apply and remove Email Hero's own labels (Worth Reading, Not Sure, Skip);
Change inbox placement and read/unread state of messages, strictly as part of the sorting you asked for;
Receive notifications when new mail arrives, so sorting happens without you doing anything.

What Email Hero never does

We never send email on your behalf.
We never draft email.
We never move messages to trash or delete them.
We never sell your data, and we never use it for advertising.
We do not train AI models on your email.
We do not transfer Google user data to other apps except as needed to provide the service.

Email Hero's use and transfer of information received from Google Workspace scopes will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Email Hero requests a single Gmail scope, https://www.googleapis.com/auth/gmail.modify, which lets it read messages in order to classify them and to show you the sender and subject of your own sorted mail, and apply, remove or change labels so it can archive a message or mark it as read. It is the narrowest scope Google publishes that permits those writes. Email Hero never deletes, trashes, reports spam, sends, drafts, inserts, or fetches attachments, and never creates Gmail filters or rules on your behalf. Google user data is never used to develop, improve or train generalized or non-personalized AI or machine-learning models.

How we use your data

Message content is fetched transiently for two purposes only: to decide which category a message belongs in, and to show you the sender and subject of your own sorted mail in Email Hero. Classification is performed by automated systems. Where an AI model is involved, we send only what the decision needs (the sender, the subject and the opening of the message) to Google's Gemini API on its paid tier. Its terms forbid using that content to train or improve Google's models. Google keeps it for up to 55 days solely to detect and prevent abuse of its service and to meet legal obligations. AI-assisted sorting is how Email Hero works, and connecting your mailbox is your consent to it. There is no separate AI opt-in and no separate AI opt-out. To stop Email Hero changing your mail at any time, turn on Protection Paused; to end processing entirely, disconnect your mailbox or delete your account, which are described below.

What we store

We store the minimum state needed to run the service: your account identifiers, sorting decisions and their explanations, your connected account settings, and operational records such as sync state. A sender's address is kept only as a keyed one-way digest, so repeat senders and your rules can be recognised without the address itself being stored. Message bodies, subjects and snippets are never stored: they are held in memory only while a request needs them, to classify a message or to show you your list, and are never written to a database, queue, log, analytics event, trace or crash report. The explanation attached to a sorting decision is stored encrypted so we can show you why a message was sorted the way it was, and is deleted when you correct the decision in Email Hero, disconnect the mailbox, delete your account, or after thirty days, whichever comes first. Any data we must store is encrypted at rest, and sensitive values are protected with managed encryption keys.

Data retention and deletion

You can disconnect a Gmail account from Email Hero at any time in the app, which stops all access immediately. You can also delete your Email Hero account, which triggers deletion of the personal data we hold, including sorting history and account settings. Deleting data on Google's side remains possible at any time through Google Security Checkup, where you can revoke Email Hero's access directly.

Sharing

We share data only with service providers strictly necessary to operate Email Hero: Google (your own Gmail data, via the API you authorized, and the Gemini API that performs the classification), our cloud hosting and database providers, and, in the mobile app, RevenueCat for subscriptions, Sentry for crash reports and PostHog for product analytics. None of those three receives your email. We never share your data with advertisers or data brokers. We may disclose data if required by law.

Children

Email Hero is not directed at children under 13, and we do not knowingly collect data from children.

Changes to this policy

If we make material changes, we will notify you in the app or by email before the changes take effect.

Contact

Questions or deletion requests: [email protected]