Back to Home

Privacy Policy

Last updated: February 13, 2026

1. Introduction

PopRelay ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email import service.

2. Information We Collect

2.1 Information You Provide

  • Google account information (email address, name, profile picture) when you sign in with Google OAuth
  • POP3 server credentials (hostname, username, password) for email servers you configure
  • Gmail label preferences for organizing imported emails
  • Payment information processed securely through PayPal

2.2 Information Collected Automatically

  • Usage data such as sync frequency, number of emails imported, and error logs
  • Device and browser information for security and troubleshooting purposes

2.3 Cookies and Analytics

We use the following cookies:

  • Session cookie: An essential HTTP-only cookie that keeps you signed in. This cookie is strictly necessary for the Service to function and does not require consent.
  • Google Analytics: We use Google Analytics to understand how visitors use our website. Google Analytics sets cookies to collect anonymous usage data such as page views and traffic sources.
  • Google Ads (AdWords): We use Google Ads conversion tracking cookies to measure the effectiveness of our advertising campaigns.

Google Analytics and Google Ads cookies are only placed after you provide consent, in compliance with EU regulations (GDPR). You can withdraw your consent at any time.

3. How We Use Your Information

We use the information we collect to:

  • Provide and maintain our email import service
  • Connect to your POP3 email servers and retrieve emails
  • Import emails into your Gmail account with your specified labels
  • Process your subscription payments
  • Send service-related communications
  • Improve and optimize our service
  • Detect and prevent fraud or abuse

4. Data Security

We implement industry-standard security measures to protect your data:

  • POP3 passwords are encrypted using AES-256-GCM encryption
  • All data transmission uses TLS/SSL encryption
  • Google OAuth tokens are stored securely and refreshed automatically
  • We never store your Gmail password—we use OAuth for secure access
  • Session tokens are hashed using SHA-256

5. Email Content

Important: We do not read, analyze, or store the content of your emails. Email messages are transferred directly from your POP3 server to your Gmail account. We only temporarily process emails during the import operation and do not retain email content after the transfer is complete.

6. Gmail API Usage

Our use of the Gmail API is limited to:

  • Importing emails from your POP3 servers into your Gmail inbox
  • Creating and managing Gmail labels for organizing imported emails

We cannot and do not read your existing Gmail emails. Our OAuth permissions are limited to importing new emails and managing labels only.

PopRelay's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

7. Data Sharing

We do not sell, trade, or rent your personal information. We may share data with:

  • PayPal: For payment processing
  • Google: For Gmail API access (OAuth tokens only)
  • AWS: For secure cloud infrastructure hosting

We may also disclose information if required by law or to protect our rights and safety.

8. Data Retention

We retain your account data for as long as your account is active. Upon account deletion:

  • Account information (email, name, profile picture) is deleted immediately
  • POP3 server configurations and encrypted credentials are deleted immediately
  • Gmail OAuth tokens are revoked and deleted immediately
  • Sync logs are deleted within 30 days
  • Payment records may be retained as required by law

9. Your Rights

You have the right to:

  • Access and export your data
  • Correct inaccurate information
  • Delete your account and associated data by contacting us at support@poprelay.net
  • Revoke Google OAuth access at any time through your Google account settings
  • Withdraw cookie consent at any time

10. Children's Privacy

Our service is not intended for children under 18 years of age. We do not knowingly collect personal information from children under 18.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Us

If you have questions about this Privacy Policy, please contact us at privacy@poprelay.net