Privacy and security
Mailvern asks for the smallest set of permissions that sending requires — and nothing more.
5 min read
Google OAuth
You sign in with Google. Mailvern never sees or stores your password, and you can revoke access from your Google account settings at any time.
What each permission is for
| Permission | Why it is needed |
|---|---|
| Google Sheets | Read the sheet you opened Mailvern in and write campaign status back to the rows. |
| Gmail send | Send the campaign from your own account so it lands in your Sent folder. |
| Google Drive (file scope) | Access only the specific file you attach inside Mailvern. |
What Mailvern never does
- Never reads your Gmail inbox.
- Never reads or writes Gmail Drafts.
- Never browses Drive files you did not select.
- Never uploads your spreadsheet to a third-party sending service.
- Never uses your data to train AI models.
- Never sells or shares your recipient list.
Transport and tracking
All traffic between Mailvern and Google is encrypted over HTTPS. Open tracking is optional and can be disabled per campaign.
Google API compliance
Mailvern's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.