Privacy Policy

Last updated: September 11, 2026

Welcome to My Mail Merge ("My Mail Merge", "we", "us", or "our"). My Mail Merge is a web-based email mail-merge application created exclusively for BBA Archon Club. The service allows authorized users to connect their Gmail account, upload recipient information, create personalized email campaigns, and send emails through their own Gmail account.

We respect your privacy and are committed to protecting the information you provide when using our service.

1. Information We Collect

1.1 Account Information

When you create an account, we may collect your email address and account authentication information. Password credentials are securely handled by our authentication provider.

1.2 Google/Gmail Account Information

When you choose to connect Gmail, My Mail Merge uses Google OAuth to authorize access to your Gmail account. We request only the Gmail permission necessary to send emails on your behalf:

https://www.googleapis.com/auth/gmail.send

We do not request permission to read your Gmail inbox, read your emails, modify your mailbox, or access unrelated Google services.

1.3 Gmail Authorization Information

To maintain your Gmail connection without requiring you to authorize the application every time, My Mail Merge securely stores the OAuth refresh token associated with your Gmail connection. The refresh token is encrypted before being stored.

We do not sell or disclose your Gmail authorization credentials to third parties.

1.4 Recipient Information

When you upload an Excel or CSV file, you may provide information such as recipient names, email addresses, course or program information, and other spreadsheet columns that you choose to use as merge fields. This information is processed to create and send your email campaign.

1.5 Campaign Information

We may store campaign information such as campaign name, email subject and body templates, recipient email addresses, merge-field information, campaign status, send status, error information, Gmail message identifiers, and attachment information.

2. How We Use Information

We use information collected through My Mail Merge to provide and operate the service, authenticate users, connect users' Gmail accounts, create personalized email campaigns, generate personalized email content, send emails through the user's authorized Gmail account, track campaign and recipient status, identify failed sends and support retries, provide campaign history and reporting, maintain security and reliability, and diagnose technical problems.

We do not use your recipient information or Gmail data to build advertising profiles.

3. Google API Services

My Mail Merge uses Google APIs to provide Gmail functionality. When you connect your Gmail account, you authorize My Mail Merge to perform the actions permitted by the Gmail scope requested by the application.

My Mail Merge's use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including applicable Limited Use requirements. We request the minimum Gmail permission necessary for the service. We do not use Google user data for advertising or sell Google user data to third parties.

4. How We Share Information

We do not sell, rent, or trade your personal information. Information may be processed by service providers necessary to operate My Mail Merge, including Google for Gmail authentication and email delivery, Supabase for authentication and application data storage, and Vercel for hosting and application infrastructure.

We may also disclose information when required by law, legal process, court order, or when necessary to protect the rights, safety, or security of our users, the service, or others.

5. Gmail Data

My Mail Merge does not read your Gmail inbox or retrieve the contents of your incoming emails. The Gmail permission requested by the application is limited to sending email on your behalf.

Emails sent through My Mail Merge are sent using your authorized Gmail account. You may disconnect your Gmail account from My Mail Merge at any time and may revoke the application's Google authorization through your Google Account settings.

6. Data Storage and Security

We use reasonable technical and organizational measures to protect information stored by My Mail Merge. These measures include encrypted HTTPS connections, authentication controls, row-level access controls for application data, encryption of stored Gmail OAuth refresh tokens, restricted access to application infrastructure, and separation of users' campaign data.

No internet-based service can guarantee absolute security. Users should protect their account credentials and should not share passwords with others.

7. Data Retention

We retain account and campaign information for as long as reasonably necessary to provide the service and maintain campaign history. You may request deletion of your account and associated information.

When information is no longer required for legitimate operational, legal, or security purposes, it may be deleted or securely disposed of. Some information may remain temporarily in backups or logs until those systems are routinely overwritten or deleted.

8. Your Choices and Rights

Depending on applicable law, you may have rights concerning your personal information, including the right to request access to information associated with your account, request correction of inaccurate information, request deletion of your information, disconnect your Gmail account, revoke Google authorization, and stop using the service.

To request assistance with your information, contact us using the details below.

9. Cookies and Authentication

My Mail Merge may use cookies or similar technologies necessary to maintain your authenticated session, protect your account, maintain application security, and provide core application functionality. We do not use cookies for third-party advertising profiling.

10. Children's Privacy

My Mail Merge is not intended for children under the age required by applicable law to independently use online services. We do not knowingly collect personal information from children in violation of applicable privacy laws.

11. Third-Party Services

My Mail Merge relies on third-party infrastructure and services, including Google, Supabase, and Vercel. Those services may have their own privacy policies and terms.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to My Mail Merge, applicable laws, or our privacy practices. When we make material changes, we may update the "Last updated" date shown at the beginning of this policy.

13. Contact Us

If you have questions about this Privacy Policy, your personal information, or the My Mail Merge service, please contact:

BBA Archon Club / My Mail Merge
Website: https://mymailmerge.in
Email: dennisjos1@gmail.com