Your inbox is not our product.

Google user data we access

After you choose to connect Gmail, Deal Miner requests the Google OAuth scope gmail.readonly. That permission allows the app to read, but not change, Gmail data. Deal Miner accesses:

• Your Google account identifier, email address, name, and profile picture for sign-in and account display.
• Message and thread identifiers, sender information, subject lines, received dates, snippets, and the text or HTML content of matching promotional emails from the date range you select.
• Text email parts that Gmail provides as detached MIME content, plus offer links and relevant image URLs embedded in those emails.
• Google OAuth access and refresh tokens needed to maintain the connection you authorized.

Deal Miner cannot send, modify, label, move, or delete Gmail messages. It does not access messages that do not match its promotional-offer search.

How we use Google user data

We use Google user data only to provide Deal Miner's visible, user-facing features:

• Authenticate you and connect the correct Google account.
• Run a scan when you request one for the selected date range.
• Identify retailer offers and extract the brand, category, offer title, description, discount, promotional code, expiration information, source link, sender, and a useful image URL when available.
• Display, search, save, hide, categorize, and mute offers in your private Deal Miner dashboard.

We do not use Google user data for advertising, retargeting, credit decisions, or training general-purpose artificial intelligence or machine-learning models.

What we store—and what we do not

We store your Google account identifier, email address, name, profile picture URL, encrypted OAuth tokens, sender preferences, scan counts, and extracted deal records. A deal record may include the source message and thread identifiers, retailer, sender domain, subject-derived title and description, category, discount, promotional code, dates, source link, and relevant image URL.

Full email bodies and attachments are processed temporarily in server memory during a scan and are not written to the Deal Miner database. Offer image bytes may be held in a short-lived server-memory cache for up to one hour so the image can be displayed safely; they are not placed in persistent storage.

Sharing, transfer, and disclosure

Deal Miner does not sell Google user data or share it with advertisers, data brokers, information resellers, or unrelated third parties. We use a limited number of service providers to operate the app:

• Railway provides application hosting and PostgreSQL database infrastructure.
• Cloudflare provides DNS, network proxying, transport security, and abuse protection.
• Google provides authentication, OAuth token services, Gmail API access, and token revocation.

These providers process data only as needed to deliver their services to Deal Miner. When you view an offer image, Deal Miner may retrieve it from the retailer's image host; that host receives a request from Deal Miner's server for the image URL supplied in the original email.

We may disclose information when required by law or when reasonably necessary to investigate abuse, protect users, or secure the service. Humans are not permitted to read Gmail content except with your explicit consent for a specific support request, when necessary to investigate a security incident, or when required by law.

How we protect data

Deal Miner uses HTTPS/TLS for data in transit between your browser, Deal Miner, and Google APIs. Google OAuth tokens are encrypted using AES-GCM before they are stored. Session tokens are cryptographically random, only their hashes are stored, and session cookies are Secure, HttpOnly, and SameSite protected in production. Server-side authorization checks scope stored records to the signed-in user. Application secrets are kept in protected deployment variables, and access to production systems is limited to what is necessary to operate and secure the service.

No internet service can guarantee absolute security. If we learn of a security incident affecting your data, we will investigate, contain it, and provide notice when required.

Retention and deletion

• Full email bodies and detached email content are discarded from server memory after the requested scan finishes.
• Offer image bytes cached in server memory expire after no more than one hour.
• Extracted deal records and scan history are automatically deleted by daily cleanup within 24 hours after they reach 90 days old.
• Login sessions expire after 30 days and their database records are removed within 24 hours after expiration.
• Your Google account profile, encrypted OAuth tokens, and retailer preferences remain until you disconnect Gmail and delete your Deal Miner account.

When you choose Disconnect, Deal Miner requests revocation of its Google token and, as part of the same request, deletes your account record, encrypted tokens, sessions, extracted deals, scan history, and retailer preferences from the active database. You can also revoke Deal Miner from your Google Account permissions. If infrastructure backups are enabled, deleted records may remain until the applicable backup expires; they are not returned to active use except when needed for disaster recovery and age out with those backups.

Your choices

You decide whether to connect Gmail and when to run a scan. You may stop future access by disconnecting inside Deal Miner or revoking access from your Google Account. To request access to or deletion of Deal Miner account information when you cannot use the in-app control, email [email protected].

Policy updates and contact

If Deal Miner changes how it handles Google user data, this policy will be updated before the new practice begins and users will be asked for consent when required. Questions about this policy or Deal Miner's data practices can be sent to [email protected].