Privacy Policy

1. Information We Collect

Account data. When you create an account we collect your email address and password. If you sign up with Google, we receive your name and email address from Google.

Billing data. Payment details are processed by our payment provider (Paddle). We store only the subscription ID and plan type — never your full card number.

Usage data. We collect aggregated metrics about how you use the service, such as pages visited, feature usage, and session duration.

Email metadata. To provide deliverability monitoring we process email headers, SPF/DKIM/DMARC records, and bounce information. We do not read or store the body of your emails.

Gmail account data. If you choose to connect a Gmail or Google Workspace account as a sending account, we request OAuth permission to send emails on your behalf. The specific Google API scope requested is https://www.googleapis.com/auth/gmail.modify. This allows Celeric to authenticate your SMTP sending sessions via your Gmail account. We use this access solely to send emails you compose and initiate through Celeric. We do not read, scan, index, or store the contents of any emails in your Gmail inbox. We store only the OAuth tokens (encrypted) and your Gmail address necessary to maintain the connection.

2. How We Use Your Data

• Provide, maintain, and improve the Celeric service.
• Process payments and manage your subscription.
• Send transactional emails (confirmations, alerts, billing receipts).
• Monitor deliverability and generate reports for your account.
• Authenticate and send emails via any Gmail or Google Workspace account you explicitly connect as a sending account.
• Detect and prevent fraud or abuse.

3. Google API Services — Limited Use Disclosure

Celeric's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically, with respect to data obtained via Google APIs:

• We use Google user data only to provide or improve the email sending feature you have explicitly enabled within Celeric.
• We do not use Google user data for advertising purposes.
• We do not sell Google user data to third parties.
• We do not allow humans to read your Google account data except where you have given us explicit permission, it is necessary for security or legal compliance, or it is required for troubleshooting an issue you have reported to us.
• We do not transfer Google user data to other parties except as necessary to provide the service (e.g., routing your outbound email through Gmail's SMTP servers using your own credentials).

The OAuth tokens obtained when you connect a Gmail account are encrypted at rest and are used exclusively for authenticating SMTP sessions on your behalf within Celeric.

4. Data Sharing & Third Parties

We do not sell your personal data. We share data only with service providers that help us operate Celeric:

• Hosting & infrastructure — cloud providers that store and process data on our behalf.
• Payment processing — Paddle for billing.
• Analytics — aggregated, anonymized usage data to improve the product.

Data obtained through Google APIs is never shared with third parties for advertising, marketing, or any purpose beyond the direct operation of Celeric features you have enabled.

We may also disclose data if required by law or to protect our rights.

5. Data Security

We use industry-standard measures to protect your data, including TLS encryption in transit, encrypted storage at rest, and regular security audits. OAuth tokens obtained from Google are stored encrypted and are never logged or exposed in plaintext. No method of transmission or storage is 100% secure, but we work continuously to safeguard your information.

6. Your Rights & Revoking Google Access

You may at any time:

• Access — request a copy of the personal data we hold about you.
• Correction — ask us to correct inaccurate data.
• Deletion — ask us to delete your account and associated data.
• Export — request your data in a portable format.
• Revoke Google access — disconnect any connected Gmail or Google Workspace account at any time from your Sending Accounts settings in Celeric. You can also revoke access directly from your Google Account permissions page. Revoking access removes Celeric's ability to send email via that account and causes all stored OAuth tokens for that account to be deleted from our systems.

To exercise any of these rights, contact us at support@celeric.app.

7. Cookies

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies. You can disable cookies in your browser settings, but some features may not work correctly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. Continued use of the service after changes constitutes acceptance of the updated policy.

9. Contact

If you have questions about this Privacy Policy, please reach out at support@celeric.app.