Privacy Policy

Meeru connects to your Gmail account through Google's official API after you grant permission on Google's consent screen. Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Gmail data to provide the user-facing features of Meeru: showing your threads as conversations, sending replies you write, managing labels and settings you change, and (only when you tap Summarize or Suggest replies) generating AI thread summaries and suggested replies.
• AI features are on-demand. Email content is sent to our AI processor (Google Gemini) only when you explicitly tap Summarize or Suggest replies for a specific thread. We never run AI over your inbox in the background, and AI output is not stored on our servers. You can disable AI features entirely in Settings.
• We do not transfer Gmail data to third parties except as necessary to provide these features (such as the AI processor described above), to comply with law, or as part of a merger/acquisition with prior notice.
• We do not use Gmail data for advertising.
• We do not allow humans to read your data, except with your explicit permission (e.g. a support request), for security purposes, or to comply with law.
• We do not use Gmail data to train, develop, or improve generalized artificial intelligence or machine-learning models.

Email content is processed, not stored. When you open Meeru, your messages are fetched from Gmail through our server and delivered straight to your browser. Message content is never written to our databases or server logs. A copy is cached locally on your own device (in your browser's storage) so the app is fast and works offline; you can clear it any time by clearing site data or disconnecting your account.

On our servers (hosted by Supabase and Vercel) we store only:

• Your account: email address and a securely hashed password.
• Workspace membership and settings.
• Gmail OAuth tokens, encrypted at rest with AES-256-GCM. These let Meeru talk to Gmail on your behalf and are deleted when you disconnect Gmail or delete your account.
• If you join the waitlist: your email address.

Meeru offers optional AI features (thread summaries, suggested replies, Feed digests) powered by Google's Gemini API. These run only when you explicitly use the feature — nothing is analyzed in the background. The relevant message text is sent to the AI provider to generate the result, is not stored by us, and is never used to train AI models. AI output is clearly labeled, and the features are entirely optional.

We use PostHog (product analytics) and Sentry (error tracking) to understand usage and fix bugs. These tools receive event names (like "thread opened") and technical error details — never email content, subject lines, or contact information from your mailbox. We scrub request bodies from error reports.

Account data is kept while your account is active. Disconnecting Gmail deletes the associated tokens immediately. To delete your account and all associated data, email hello@meeruchat.com and we will complete the deletion within 30 days. You can also revoke Meeru's access to your Google account at any time at myaccount.google.com/permissions.

All traffic is encrypted in transit (TLS). OAuth tokens are encrypted at rest. Access to production systems is restricted and audited. No system is perfectly secure, but we design so that the most sensitive data — your email — simply isn't on our servers to lose.

Meeru is not directed at children under 16, and we do not knowingly collect data from them.

We'll post any changes to this policy here and update the date above. For material changes we'll notify you by email. Questions? Contact hello@meeruchat.com.