Mailyen

Privacy

We keep only what we need to deliver messages, run the inbox gate and handle stakes.

Our host, Cloudflare, counts page visits with Web Analytics. It sets no cookies and doesn't track you across sites. Signing in uses one cookie that keeps you signed in.

If you connect your inbox

Mailyen reads headers only: who wrote, to whom, the subject, the date and the technical lines that say whether a mail is authentic or automated. It never opens a message body or an attachment, and asks Gmail for nothing else. The exact list of headers is: From, Sender, To, Cc, Reply-To, Subject, Date, Message-ID, In-Reply-To, References, Return-Path, Authentication-Results, DKIM-Signature, Content-Type, Content-Class, List-Id, List-Unsubscribe, List-Post, Precedence, Auto-Submitted, X-Auto-Response-Suppress, Feedback-ID, X-Mailyen, X-SG-EID, X-Mailgun-Sid, X-PM-Message-Stream, X-SES-Outgoing, X-MC-User, X-Mandrill-User, X-MSFBL, X-Mailin-EID, X-Mailjet-Campaign, X-Zendesk-From-Account-Id, X-Intercom-Bot, X-Freshdesk-Ticket-Id, X-HelpScout-Message-Id, X-Front-Message-Id, X-Docusign-Envelopeid, X-GitHub-Reason, X-Slack-Message-Id, X-Campaign-Id, X-LinkedIn-Class.

With your permission Mailyen may only:

  • add and remove its own labels (Mailyen/Held, Mailyen/Staked, Mailyen/Free lane, and in Watch mode Would hold and Unsure), and move a mail in or out of your inbox;
  • send the auto-reply and the “No, thanks” reply you set up, from your address, in the sender's thread;
  • see who you write to, so the people you know always reach you.

It never deletes mail. No person at Mailyen reads your mail data, and it is never used for advertising, never sold, and never used to train any AI model.

Mailyen's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we store

For senders: your name, email address, company, the message you write on a page (never the mail you sent to a gated inbox), and the status of its stake. For recipients: your email address, your page, and if you connect an inbox: the addresses you have written to (your known list), and for mail held outside your inbox its sender, subject and date. Access tokens are encrypted. Payment details are handled by Stripe; we never see your card number.

How long: held-mail records 90 days, records of replies we sent for you 1 year, the known list until you disconnect, stakes and the charity ledger 7 years (accounting law).

Disconnecting

One click in Settings removes our labels, puts held mail back in your inbox if you want, revokes our access and deletes your known list and held-mail records. Anything left is deleted within 30 days. You can also revoke access any time at myaccount.google.com/permissions.

Why

To run the service you asked for (delivering messages, the gate, stakes), and to prevent abuse such as mass messaging (our legitimate interest). We don't sell data and don't use it for advertising.

Who we share it with

The recipient of your message, our payment provider (Stripe), our email provider (Postmark), our database and hosting providers (Neon, Vercel). Nobody else.

Your rights

You can ask for a copy of your data, or for it to be corrected or deleted, by replying to any email from Mailyen.