Privacy-First Architecture: EmailFlow is designed with a localized, client-side architecture. We do not operate external developer servers to collect, store, or profile your personal data. All candidate data and API credentials are kept strictly on your local device or transmitted securely to your authorized service providers.
1. Information We Access, Process, and Store
A. Authentication Credentials & API Keys
To connect to your third-party services, EmailFlow allows you to provide or authorize:
Google OAuth 2.0 Tokens: Stored locally on your device to communicate with Google Sheets and Google Drive.
Resend API Key: Stored locally to dispatch transactional recruitment emails.
Firebase Cloud Messaging: Used for cross-device state synchronization via push topics.
B. Candidate Records (Personal Information)
Candidate information (names, email addresses, phone numbers, colleges, status) is stored in sandboxed local storage to enable recruitment workflows, status tracking, and document generation.
2. Third-Party Services
Service
Provider
Purpose
Data Handled
Google Sheets API
Google LLC
Syncing candidates & statuses
Designated candidate spreadsheet data
Google Drive API
Google LLC
Storing generated PDFs (NDAs/offers)
Designated Drive folder documents
Google Sign-In
Google LLC
User authentication
OAuth tokens (no external servers)
Resend API
Resend, Inc.
Transactional email dispatch
Candidate emails & attachments
Firebase Cloud Messaging
Google LLC
Cross-device sync notifications
FCM notification payloads
3. Google API Services User Data Policy (Limited Use)
EmailFlow's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements:
Data accessed through Google APIs is used solely to provide user-facing features (reading/updating spreadsheets and saving generated documents in Google Drive).
Data is never used for serving advertisements or transferred to data brokers.
Data is never used to train generalized artificial intelligence or machine learning models.
4. Data Retention & Deletion
You have full autonomy over your data:
Disconnect Google Account: Revoke tokens anytime directly in the Settings tab.
Purge Stored Data: Clear all local candidate caches, credentials, and logs via the Settings tab.
Uninstall: Removing the app permanently erases all local application data and cached keys.
5. Security
All network communications occur over encrypted TLS/HTTPS connections. Cleartext traffic is strictly disabled.
6. Contact
For questions or assistance regarding this Privacy Policy, please contact the developer via the official repository or support channels.