Mailtuck saves the email you have open in Gmail™, together with its attachments, into a Notion database you choose. This page states exactly what it touches, where it sends it, and how it is protected.
Mailtuck runs inside Google Apps Script under your own Google account. Your email goes from Google to Notion, and, only if you switch on the optional column filling described in section 4, to Anthropic. It never passes through a server belonging to us, because we do not operate one. We hold no copy of your messages, so there is nothing on our side to breach.
gmail.addons.current.message.readonly permission. This is a narrow, contextual
permission: it does not grant access to your mailbox, your search history, or any other
message.Mailtuck does not request permission to read your whole mailbox, your Google Drive, your contacts, or your calendar. Those permissions are absent from its manifest, so it cannot use them even if asked to.
When you press Save, it creates one page in the Notion database you selected, containing the subject, the message text, and the attachments. Attachments larger than your Notion plan's file limit are not uploaded; a line naming the file is written instead, so nothing disappears silently.
Mailtuck Pro can fill your Notion database's own columns from the email. That feature, and only that feature, sends message content to a third-party AI service.
https://api.anthropic.com, over HTTPS. It does not pass through any server of
ours.Mailtuck's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements.
In particular, Workspace user data obtained through Mailtuck is never used, transferred or sold to develop, train, retrain or improve any generalised or foundational machine learning or artificial intelligence model. The AI feature in section 4 uses an existing third-party model to produce an answer for you, at the moment you ask for it, under your own account. It does not contribute your mail to anyone's training data, and we ourselves receive no Workspace data at all, so we have none to train on, transfer, or sell.
Your Notion integration secret, and your Anthropic API key if you set one, are stored in Google's per-user property store, readable only by your own copy of the add-on. We never receive either of them. Selecting “Disconnect Notion” deletes the Notion secret immediately, and clearing the key field deletes the Anthropic key immediately.
Mailtuck handles personal and potentially sensitive information: the contents of an email. These are the mechanisms that protect it.
api.notion.com, api.anthropic.com and our licence endpoint. The
add-on cannot reach any other host, and plain HTTP is not used anywhere.No analytics, no telemetry, no advertising identifiers, no profiling. We do not sell or share data, because we never receive any.
Mailtuck is a workplace tool and is not directed at children under 13.
Uninstalling the add-on removes its stored credential and settings with it. Pages already created stay in your Notion workspace, where you control them. If you would like confirmation that nothing of yours remains with us, write to the address in section 12 and we will answer within five business days, noting that we hold no message content in the first place.
If this policy changes we will update the version and date above.