Security

Last updated: December 18, 2025

Built for trust

Protecting your email data is core to Email Ferret. We use security best practices to keep your information safe, limit access, and meet Google's required standards for apps that use Google OAuth.

Encryption in transit and at rest

Data is protected when it's transmitted and when it's stored. Sensitive credentials (like OAuth tokens) are encrypted before being persisted.

  • Secure connections: Traffic is protected using modern transport encryption.
  • Encrypted secrets: OAuth tokens are encrypted before storage.
  • No passwords stored: We never store your Gmail password.

Least-privilege access

We request only the permissions needed to deliver the product features you enable, and we limit access internally.

  • Scoped access: Permissions are used to analyze messages and apply labels/archiving based on your configuration.
  • No sending: We do not have permission to send, compose, or reply to emails on your behalf.
  • Revocable: You can disconnect your account or revoke access at any time from your Google Account settings.

Google OAuth + policy compliance

Email Ferret uses Google OAuth and Google APIs to provide inbox filtering. Our use of Google API data follows Google's API Services User Data Policy, including Limited Use requirements.

  • Limited use: We only use Google API data to provide the service you requested.
  • No ads: We do not use Google API data for advertising.
  • No selling: We do not sell Google API data.

Data minimization and controls

We aim to collect and retain only what's needed to operate the service, support users, and maintain reliability.

  • Purpose-limited processing: Data is used to classify messages and manage labels based on your settings.
  • User control: You can disconnect your Gmail account and request account deletion.

Monitoring and incident response

We monitor for abnormal activity and operational issues. If we identify a security incident affecting user data, we will investigate promptly and take appropriate remediation steps.

Security questions

If you have questions about our security practices or need to report a concern, contact us at support@emailferret.io.