Privacy Policy – EmailVac

Overview

EmailVac ("we", "our", "the extension") is a Chrome browser extension developed and operated by SSM Goods. EmailVac helps you clean your email inbox by analysing email sender metadata, performing bulk deletions, and automating unsubscribe requests.

This Privacy Policy explains what data EmailVac accesses, how it is used, and your rights regarding that data. We are committed to being fully transparent about our data practices.

      The short version: EmailVac reads your email metadata locally inside your browser using official provider APIs. We do not operate any servers that receive, store, or process your email data. Nothing about your emails ever leaves your device.
    

What data EmailVac accesses

EmailVac requests access to your email account solely to provide its inbox-cleaning features. The specific data accessed depends on which email provider you connect.

Gmail (via Google OAuth 2.0)

When you connect Gmail, EmailVac requests the following Google API scopes:

Scope	Type	Why it's needed
`gmail.readonly`	Read	To read the From and List-Unsubscribe headers of your emails. We read sender metadata only — we never read email body content during scanning.
`gmail.modify`	Write	To delete emails, apply spam labels, and remove inbox labels — actions you explicitly trigger.
`userinfo.email`	Read	To display your connected email address in the extension UI.

      EmailVac only reads email headers (sender address, sender name, date, and List-Unsubscribe) during scanning — never message body content. Body content is only fetched when you explicitly click "Unsubscribe" on a specific email, to extract the unsubscribe link.
    

Yahoo Mail and AOL Mail

For Yahoo Mail and AOL Mail, EmailVac operates as a content script injected into the provider's website when you have it open in a browser tab. It makes requests to Yahoo's internal API using your existing browser session (cookies) to fetch email sender metadata. No separate authentication or password is required.

Outlook

Outlook support is in development. When available, it will use the Microsoft Graph API with OAuth 2.0 authentication, following the same local-processing model as Gmail.

How your data is processed and stored

All processing happens inside your browser. EmailVac does not operate any servers, databases, or cloud infrastructure that receives or stores your email data.

Email metadata (sender names, sender email addresses, email counts) is fetched from your email provider's API and stored temporarily in chrome.storage.local — a sandboxed storage area accessible only by EmailVac on your device.
OAuth access tokens for Gmail are stored securely in Chrome's built-in identity token store, not by EmailVac directly.
Scan results are cached locally so you do not need to rescan every time you open the extension. You can clear this cache at any time from the extension's Settings page.
No email content, no personally identifiable information, and no usage data is ever transmitted to SSM Goods or any third party.

Data sharing and third parties

EmailVac does not share, sell, rent, or disclose your data to any third party. Specifically:

We do not share your email data with advertisers.
We do not use your data to train machine learning models.
We do not include any third-party analytics, tracking, or advertising SDKs in the extension.
We do not transfer your data outside your browser for any purpose.

The only external services EmailVac communicates with are your email provider's own APIs (Google, Yahoo, Microsoft) — and only to perform the actions you explicitly request.

Google API Services disclosure

EmailVac's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

In compliance with that policy, EmailVac:

Only uses Gmail data to provide the inbox-cleaning functionality described in this policy and in the extension's Chrome Web Store listing.
Does not use Gmail data for serving advertisements.
Does not allow humans to read your Gmail data (all processing is automated and local).
Does not transfer Gmail data to third parties except as necessary to provide the service (i.e., making API calls back to Google on your behalf).

Your rights and controls

You have full control over your data at all times:

Revoke Gmail access: Visit myaccount.google.com/permissions and remove EmailVac. This immediately revokes the extension's ability to access your Gmail.
Clear cached data: Open the extension, go to ⚙️ Settings, and click "Clear All Cached Data". This removes all locally stored scan results.
Uninstall: Right-click the extension icon in Chrome and select "Remove from Chrome". This removes the extension and all locally stored data.
Review permissions: You can review the exact permissions EmailVac has been granted at any time in Chrome's extension settings (chrome://extensions).

Children's privacy

EmailVac is not directed at children under the age of 13. We do not knowingly collect or process data from children. If you believe a child has used EmailVac, please contact us so we can take appropriate action.

Payments and Pro plan

EmailVac offers a free plan and a one-time Pro plan ($29) that unlocks unlimited scans, deletions, and unsubscribes.

Payment processing

Payments are processed by Stripe (stripe.com), a third-party payment processor. When you purchase EmailVac Pro, Stripe collects your payment details (card number, billing address) directly. SSM Goods never sees or stores your card details. Stripe's handling of your payment data is governed by their own Privacy Policy.

We receive from Stripe only: your email address (to deliver your license key) and a payment confirmation ID. This information is used solely to issue and verify your license key.

License keys

Upon successful payment, a unique license key is generated and emailed to you. The key is stored in:

Our license server (Cloudflare Workers KV) — a record of valid keys linked to your email address, used to verify license authenticity when you activate the extension.
Your browser (chrome.storage.local) — the activated key is cached locally so the extension does not need to contact our server on every action.

We do not use your email address for marketing. It is used only to deliver your license key and respond to support requests.

Refund policy

Refunds are not available once a license key has been activated and Pro features have been used. Because EmailVac Pro delivers its full value immediately upon activation — unlimited inbox scanning, deletions, and unsubscribes — the license is considered fulfilled at the point of first use.

If you experience a verified technical issue that prevents EmailVac Pro from functioning as described, contact us at [email protected] within 7 days of purchase. We will work to resolve the issue or, at our discretion, issue a refund if the problem cannot be resolved.

If your license key was not delivered after purchase, contact us immediately and we will resend it.

Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are material, we will note them in the Chrome Web Store listing update description. Continued use of the extension after changes constitutes your acceptance of the updated policy.

Contact us

If you have any questions about this Privacy Policy or about how EmailVac handles your data, please contact us:

SSM Goods

Email: [email protected]

Website: emailvac.com