MailBridge privacy policy

Last updated 5 November 2026

Who is responsible

MailBridge is operated by Innova Apps, CVR 45291154, Tove Maës vej 1, 1 TH, 2500 Valby, Denmark (innovaapps.ai). Innova Apps is the controller of the personal data described here. Contact support@innovaapps.ai with any privacy question or request. This policy covers the MailBridge Gmail™ add-on and the capture desk at https://mailbridge.innovaapps.ai.

Google permissions and what they are used for

• gmail.addons.execute lets MailBridge run as an add-on in Gmail, so Gmail can show MailBridge's cards and send your actions in them to the MailBridge server. It does not give access to message content by itself.
• gmail.addons.current.message.action lets MailBridge read only the message you have open, and only after you choose Load this email. MailBridge then reads that one message: its subject, sender, recipients, date, body, message and conversation IDs, and its attachments. MailBridge does not read other messages, search your mailbox, send email, or change or delete messages.
• userinfo.email confirms your Google account ID and email address. MailBridge uses them to identify you, keep your workspace separate from other users, check that the add-on and the capture desk are signed in to the same account, and match Team invitations.

The capture desk uses Sign in with Google for the same purpose. It receives your Google account ID, email address and, when Google provides it, your name. MailBridge does not request any other Google data.

Google API Services User Data Policy

MailBridge's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• Gmail data is used only to provide the capture features you choose to use in MailBridge.
• It is transferred only as described under Who receives information: to the destination you choose, to your Team, and to MailBridge for Outlook if you link it, each at your direction. It may also be disclosed when needed for security or to comply with the law.
• It is never sold, used for advertising, or used to develop, improve or train artificial intelligence or machine-learning models.
• People at Innova Apps do not read it unless you ask us to for support and agree to it, it is needed for security purposes such as investigating abuse, or the law requires it.

Other information MailBridge stores

• Account profile. Your Google account ID, email address and name.
• Destination connections. Notion or ClickUp access tokens, the connection's name, and the destinations it can reach (Notion data sources and their properties, or ClickUp workspaces and lists). When you append to an existing item, MailBridge reads item titles from that destination so you can choose one.
• Captures. The title, property mapping and attachments you choose, the content written to the destination, the resulting item's ID and link, and the capture's status.
• Billing. Your Stripe customer and subscription IDs, plan, seats, subscription status and period dates, this month's capture count, and your Free-plan destination for the month. You enter payment details on Stripe's hosted pages; MailBridge never sees card numbers.
• Team. Team membership, and pending invitations with the invited email address.
• Sessions. One essential cookie keeps you signed in to the capture desk and protects its forms. MailBridge does not use advertising or analytics cookies.

Who receives information

• The destination you choose. When you capture an email, the content and attachments you selected are sent to your Notion or ClickUp destination. That provider's permissions and privacy policy then apply. Links to the original email keep their access controls; MailBridge does not create public sharing links.
• Google Cloud hosts MailBridge as our infrastructure provider. Google is also the source of the Gmail data and of sign-in.
• Stripe processes subscription payments and hosts checkout and the billing portal. MailBridge does not send email content to Stripe.
• Your Team. On a Team plan, members see the team's shared capture history: email subjects, destination names, status, item links and the name of the member who captured each one. Email bodies and files are not shared. The Team owner also sees members' email addresses and names. Invite only people who should see that history.
• MailBridge for Outlook, only if you link it, as described below.

Innova Apps does not sell personal data or share it for advertising. Information may be disclosed if the law requires it.

Optional Outlook license link

This section applies only when Innova Apps offers MailBridge for Outlook, a separate add-in it also operates, and you choose to link it. When the Outlook edition is not offered, the link controls do not appear and none of the following happens.

You start the link under Plan and account > Use your license in Outlook, enter the code in MailBridge for Outlook within ten minutes, and then choose Confirm this Outlook account in the same browser.

• Stored by MailBridge: the Outlook account's Microsoft tenant and user IDs, the email address and name provided by MailBridge for Outlook, and when you linked it. Linking codes are stored only as a hash and expire after ten minutes.
• Shared with MailBridge for Outlook while linked: your plan, subscription status, seats, period end date, this month's usage and Free-plan destination ID. On a Team plan this also includes the shared Team capture history (email subjects from Gmail and Outlook, destination names, status, item links and the profile names of the members who captured them). For a Team owner it also includes members' Google account IDs, email addresses and names. MailBridge for Outlook shows this information in the Outlook add-in. Email bodies, attachments and Notion or ClickUp credentials are never shared.
• Received from MailBridge for Outlook: for each Outlook capture, a request to count it against your plan, and a receipt with its email subject, destination name, status, item link and time. These receipts count toward your usage and appear in Team history.
• Retention: Receipt subjects and destination names are removed after 30 days, like other source content. The link and any pending codes are removed when you choose Unlink Outlook account or delete your MailBridge account; the remaining receipt records are deleted with your account. Information MailBridge for Outlook has already received is covered by that edition's privacy policy.

This sharing happens only at your direction, to provide the shared license and Team history you enabled, and it remains subject to the Limited Use requirements above.

Where and how information is stored

MailBridge runs on Google Cloud Compute Engine in the EU region europe-west1 (Belgium), on a single server with an encrypted persistent disk. MailBridge additionally encrypts the stored records themselves, including email content, attachments, captures, provider credentials, profiles and billing records, with AES-256-GCM. Database indexes hold only identifiers (such as account, message and Stripe customer IDs), timestamps, capture status and hashed keys, never email content. Provider credentials stay on the server and are never sent to your browser. All traffic uses HTTPS. MailBridge does not write email content or credentials to its logs, and its web proxy keeps no request-access log.

How long information is kept

• Email content: 30 days. Loaded messages and their attachments are removed 30 days after they were first loaded, and capture payloads 30 days after the capture was created. A linked item's saved content is removed 30 days after it was first saved. Cleanup runs every hour while the service is running. An outage delays it until the service resumes, and content for an account with a capture in progress is removed at a later run.
• Ledger records: until account deletion. After content expires, MailBridge keeps only what prevents duplicate writes and lets you find captured items: the capture's ID, status and time, message identifiers (the Gmail message ID and a hash of its stable ID), the destination's ID, and the IDs and link of what was written remotely. Expired captures cannot be retried.
• Connections and destination lists until you disconnect the provider or delete your account.
• Profile, billing, usage and Team records until you delete your account.
• Short-lived records: sign-in sessions expire after seven days, authorization and linking codes within ten minutes, and Team invitations after 24 hours.
• Backups: 7 days. Encrypted daily snapshots of the disk are stored in europe-west1 and kept for 7 days. Data deleted from MailBridge leaves the backups within 7 days.
• Payment records are held by Stripe under its own policy. Innova Apps keeps invoices and payment records for as long as accounting and tax law requires.

Your controls

• Disconnect a provider: in Connections, choose Disconnect. This removes that provider's stored credentials, destinations and pending authorization, and cancels its queued captures. To revoke MailBridge's access completely, also remove it in your Notion or ClickUp connection settings. Content already captured there stays.
• Unlink Outlook: in Plan and account, choose Unlink Outlook account.
• Team: members can choose Leave team; owners can choose Remove member.
• Subscription: choose Manage or cancel subscription to open the Stripe billing portal.
• Delete your data: in Plan and account > Your data, type DELETE and choose Delete my MailBridge account. This erases your messages, captures, history and ledger, connections, destinations, profile, billing and usage records, Team membership, Outlook link and sign-in sessions. Deletion waits for active captures to finish. First cancel any subscription and remove Team members. A subscription cancelled at the end of its period remains until that period ends; contact support if you need deletion sooner.
• Google access: you can remove MailBridge from your Google Account connections. This stops new access but does not delete data MailBridge already holds; use Delete my MailBridge account for that.

Deleting your MailBridge account does not delete the original email, items in Notion or ClickUp, Stripe's records, or information MailBridge for Outlook already holds.

Legal basis and your rights

Innova Apps processes this information to provide the service you request, to keep it secure, and to meet legal obligations such as bookkeeping. You can ask for access to, correction, export or deletion of your personal data, or object to or restrict its processing, by emailing support@innovaapps.ai. You can also complain to a data protection authority, such as the Danish Data Protection Agency (Datatilsynet).

Security and changes

Report a suspected security issue to support@innovaapps.ai. Do not include access tokens or private email content in support requests. If this policy changes, the new version will be posted on this page with a new date.