Privacy Policy
Last updated: September 2026
Zenntic is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect your information when you use our service at zenntic.com.
1. Who We Are
Zenntic is an email automation service that connects to your Gmail or Outlook inbox to automatically sort, categorise, and draft replies to your emails. We are based in the Netherlands.
For questions about this policy, contact us at [email protected].
2. Mailbox Access
Zenntic connects to one mailbox per account, either Gmail or Outlook. In both cases the connection is made through the provider's own sign-in screen, which shows you exactly what you are granting before you agree. Zenntic never asks for, receives, or stores your mailbox password.
Zenntic does not send email on your behalf, and it does not have permission to delete your messages. This is true for both providers.
Gmail
Zenntic connects to your Gmail account using Google OAuth. We request the following scopes, and nothing beyond them:
| Scope | What it allows | Why Zenntic needs it |
|---|---|---|
gmail.modify |
Read messages and change their labels | To read an incoming message so it can be categorised, and to apply the label that records the outcome |
gmail.labels |
Create and manage labels | To create and maintain the category labels Zenntic sorts your mail into |
gmail.compose |
Create drafts | To place a suggested reply in your drafts folder |
You can withdraw Zenntic's access at any time at myaccount.google.com/permissions.
Outlook
Zenntic connects to your Outlook mailbox using Microsoft Graph. We request the following permissions, and nothing beyond them:
| Permission | What it allows | Why Zenntic needs it |
|---|---|---|
offline_access |
Keep the connection working without asking you to sign in again | So sorting continues on a schedule rather than only while you happen to be signed in |
User.Read |
Read your basic profile | To read back which mailbox address was connected, so it can be shown to you |
Mail.ReadWrite |
Read messages, change their categories, and create drafts | To read an incoming message so it can be categorised, to apply the category that records the outcome, and to place a suggested reply in your drafts |
MailboxSettings.ReadWrite |
Read and change your mailbox settings | Outlook keeps the list of available categories in your mailbox settings, so this is the only permission that allows Zenntic to create the categories it sorts your mail into |
One point about the last permission deserves to be stated plainly rather than left in the small print. Microsoft does not offer a narrower permission for the category list, so granting it also technically covers other mailbox settings: your automatic replies, working hours, time zone, language, date and time format, archive folder, mailbox type, and how meeting messages are delivered to delegates.
Zenntic does not read or change any of those. The only thing it touches is the category list. We are telling you this because the Microsoft consent screen describes the permission in broad terms, and you are entitled to know what the software actually does with it.
You can withdraw Zenntic's access at any time. For a personal Microsoft account this is at account.live.com/consent/Manage; for a work or school account it is in the My Apps portal at myapps.microsoft.com.
Withdrawing access, with either provider, stops all further processing immediately.
3. What Data We Collect
Account data
When you connect your mailbox, we store your email address as your account identifier, an OAuth refresh token that allows us to access that mailbox on your behalf, which provider it belongs to, and your subscription plan.
Email data
For each message Zenntic processes, we store:
- the message and thread identifier assigned by your mail provider
- the sender address, the subject, and the full body text of the message
- the time the message was received
- the labels that were applied
- the output of our processing: category, urgency, a short summary, the reasoning behind the categorisation, and a suggested reply
We do not store your mailbox password or your attachments.
Payment data
Payment is processed by Stripe. We do not store your card details. We receive confirmation of payment and your subscription status from Stripe.
4. How We Use Your Data
We use your data exclusively to:
- connect to your Gmail or Outlook mailbox via the provider's OAuth
- categorise your emails automatically, using Gmail labels or Outlook categories
- generate draft replies using AI
- log processing results so you can review what happened
- provide and support the service
We do not sell your data, we do not use it for advertising, and we do not share it with third parties beyond what is described in this policy.
5. Limited Use
Zenntic's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Specifically:
- We do not use your Google user data for advertising, and we do not build advertising profiles from it.
- We do not use your Google user data to train generalised artificial intelligence or machine learning models.
- No Zenntic personnel reads your messages, except where you have given explicit consent, where it is necessary for security purposes such as investigating abuse, or where we are required to do so by law.
6. Third Parties We Work With
| Service | Purpose | Privacy Policy |
|---|---|---|
| Google / Gmail API | Mailbox access via OAuth, for Gmail customers | google.com/privacy |
| Microsoft Graph | Mailbox access via OAuth, for Outlook customers | privacy.microsoft.com |
| Google Gemini API | AI categorisation and reply drafting | google.com/privacy |
| Supabase | Database for tokens and processing records | supabase.com/privacy |
| Stripe | Payment processing | stripe.com/privacy |
| Render | Backend hosting | render.com/privacy |
| n8n | Workflow automation that moves messages between the services above | n8n.io/legal/privacy |
The subject and body of your messages are sent to the Google Gemini API for the single purpose of categorising the message and drafting a suggested reply. Google does not use data submitted to the paid Gemini API to train its models.
7. Data Retention
- OAuth tokens — stored for as long as your account is active. Deleted when you disconnect your mailbox.
- Processed email records — retained for as long as your account is active. Deleted on request, and when you ask us to delete your account.
- Payment records — retained as required by Dutch tax law (7 years).
8. Your Rights (GDPR)
As a user based in the EU, you have the right to:
- Access — request a copy of the data we hold about you
- Deletion — request deletion of your account and all associated data
- Correction — request correction of inaccurate data
- Portability — receive your data in a portable format
- Objection — object to processing of your data
- Withdraw consent — disconnect your mailbox at any time
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
9. Security
We protect your data using:
- AES-256-GCM encryption of OAuth refresh tokens before they are written to our database, cryptographically bound to your account so that a stored token cannot be reused against another account
- HTTPS for all data in transit
- Row-level security on our database, so that only our backend can reach your data
- No storage of mailbox passwords — only OAuth tokens, which you can revoke at any time in your Google Account settings
10. Cookies
Zenntic.com uses only essential cookies required for the website to function. We do not use tracking or advertising cookies.
11. Changes to This Policy
We may update this policy from time to time. We will notify you of significant changes by email. Continued use of the service after changes constitutes acceptance of the updated policy.
12. Contact
For privacy-related questions or requests:
Email: [email protected]
Website: zenntic.com