Privacy Policy

1. Overview & Service Scope

This Privacy Policy describes how TRUVMail ("we", "us", "our", or "the Platform"), operated under TechTruv, collects, uses, protects, and handles your personal information when you access or use our website (https://truvmail.techtruv.com), our bulk email marketing suite, campaign dispatching services, and related applications.

By accessing TRUVMail or connecting third-party accounts (including Google accounts), you consent to the data practices described in this policy. If you do not agree with this policy, please do not use our services.

2. Information We Collect

We collect information that is necessary to provide you with secure authentication, account management, and bulk email campaign sending capabilities:

• Account & Profile Information: When you sign up, create an account, or log in, we collect your name, email address, profile picture (if provided by OAuth), and encrypted credentials.
• Campaign & Dispatch Data: Email templates, subject lines, message bodies, campaign scheduling parameters, and uploaded recipient contact lists (such as CSV files containing recipient email addresses and custom variables).
• Mail Server Configurations: Custom SMTP credentials (host, port, username, encrypted password, encryption protocol) or OAuth tokens for connected mail accounts.
• Usage & Activity Logs: IP address, browser type, device information, access timestamps, campaign dispatch events, and system audit logs.

3. Google OAuth & API User Data

TRUVMail integrates with Google OAuth 2.0 to provide convenient single sign-on (SSO) and direct email campaign dispatching via the Google Gmail API. When you authorize TRUVMail with your Google Account, we request access only to specific scopes strictly necessary for functionality.

What We Do NOT Do With Your Google Data:

• We DO NOT read your personal inbox: TRUVMail does not request or use read scopes (such as gmail.readonly or mail.google.com). We cannot view, read, index, or download your personal incoming or existing emails.
• We DO NOT access your contacts: TRUVMail does not read or extract your personal Google Contacts.
• We DO NOT sell or broker your Google data: We will never sell, lease, or monetize your Google account data or email content to third parties.
• We DO NOT train AI models on your emails: Your Google data, campaign content, and email dispatches are never used to train generalized artificial intelligence or machine learning models.

4. Google API Services User Data Policy (Limited Use)

In accordance with Google's Limited Use requirements:

1. We only use Google user data to provide user-facing features that are prominent in TRUVMail's user interface (account authentication and email dispatching).
2. We do not transfer this data to third parties unless necessary to provide or improve these features, comply with applicable law, or as part of a merger or acquisition with explicit notice.
3. We do not use or transfer Google user data for serving advertisements, including personalized, re-targeted, or interest-based ads.
4. Humans are not permitted to read your email data unless you have given explicit consent for troubleshooting, it is necessary for security reasons (such as investigating abuse), or to comply with applicable law.

5. How We Use Your Data

We use the data we collect for the following operational and service purposes:

• Providing and Managing Services: Authenticating users, storing campaign drafts, managing recipient lists, and delivering campaign emails via connected SMTP or Gmail channels.
• Analytics & Delivery Reporting: Providing you with campaign metrics such as sent count, delivery status, open rates, and click tracking.
• Security & Abuse Prevention: Enforcing rate limits, detecting spam, preventing unauthorized account access, and protecting platform integrity.
• Customer Support & System Communication: Responding to user inquiries and notifying users about critical system or security updates.

6. Data Storage & Security

We implement industry-standard administrative, physical, and technical safeguards to protect your personal information and credentials:

• Token & Credential Encryption: Google OAuth access and refresh tokens, as well as SMTP passwords, are stored in secured databases protected by robust encryption algorithms.
• Data in Transit: All data transmitted between your browser, our servers, and Google APIs is encrypted using modern TLS (Transport Layer Security) encryption.
• Access Controls: Server and database access is restricted strictly to authorized engineering personnel under least-privilege principles.

7. Data Sharing & Third-Party Processors

We do not sell, rent, or trade your personal data. We only share data with trusted third-party service providers under strict data processing agreements:

• Google APIs / Google Cloud: For user authentication and email sending via authorized OAuth endpoints.
• Hosting & Infrastructure Providers: Secure cloud server hosts that maintain our application infrastructure and databases.
• Legal Obligations: If required by law, subpoena, or lawful court order, we may disclose information to comply with legal processes.

8. User Rights & Revoking Access

You have complete control over your data and connected accounts at all times:

Disconnecting Your Google Account in TRUVMail:

You can remove or unlink any connected Google Mail Account at any time by navigating to Settings → Mail Accounts inside your TRUVMail dashboard and clicking Delete on the respective account.

Revoking Permissions via Google Security:

You can immediately revoke TRUVMail's access to your Google Account at any time directly through Google:

1. Visit your Google Account Security / Third-party Apps Permissions page.
2. Locate TRUVMail in the list of authorized third-party applications.
3. Click Remove Access. Google will instantly revoke all OAuth access and refresh tokens granted to TRUVMail.

Account Deletion & Data Erasure:

Under GDPR and applicable privacy laws, you have the right to access, rectify, or request complete deletion of your TRUVMail account and all associated campaign data, contact lists, and logs. To request account deletion, contact our support team at privacy@techtruv.com.

9. Tracking Pixels, Cookies & Analytics

TRUVMail provides open and click tracking functionality for campaign senders:

• Open Tracking: A tiny transparent 1x1 tracking pixel is embedded in outbound campaign emails to record when an email is opened.
• Click Tracking: Links within campaigns are wrapped in tracking redirects to record click engagements before redirecting the recipient to the intended destination URL.
• Session Cookies: We use standard HTTP cookies solely to maintain your active login session and user preferences on TRUVMail.

10. Contact Information & Inquiries

If you have any questions, concerns, or requests regarding this Privacy Policy, your Google data, or our data handling practices, please contact us: