Privacy policy and your data
What we collect, how we use it, and your rights
Updated December 2025
Our privacy commitment
Eskra is built on a simple principle: your data is yours. We only collect what's necessary to provide the service, and we never sell or share your information with third parties for marketing purposes.
What data we collect
To provide Eskra's service, we collect and process the following:
- Account information: Email address, name, and password (encrypted)
- Email access tokens: OAuth tokens to fetch your emails when you're logged in
- Usage data: Which features you use and how often (for improving the product)
- AI settings: Your system instructions, signatures, and preferences
- Connected sheets: References to Google Sheets you've connected (not the sheet content itself)
- Billing information: Handled by Stripe - we never see your credit card details
What we don't collect
Just as important as what we do collect is what we don't:
- Your emails: Not stored permanently on our servers
- AI-generated responses: Not logged or saved after they're displayed to you
- Sent emails: We don't keep copies of emails you send through Eskra
- Sheet content: Google Sheets data is only cached temporarily during your session
- Browsing history: We don't track where you go outside Eskra
How we use your data
The data we collect is used exclusively for:
- Providing the service: Fetching your emails and generating AI responses
- Authentication: Verifying your identity when you log in
- Product improvement: Understanding which features are used most
- Customer support: Helping you troubleshoot issues
- Billing: Processing your subscription payments
Note: We never use your data for advertising, never sell it to third parties, and never train our AI models on your specific emails without explicit consent.
You control what AI can see
Eskra doesn't automatically scan your entire inbox. You have complete control:
- You load your inbox and choose which emails to open
- AI only sees emails you explicitly click on
- You can filter by folders, labels, or specific senders
- Sensitive emails can be skipped entirely
Tip: Many users create a specific label or folder for customer emails and only load those in Eskra, keeping personal emails completely separate.
Third-party services we use
To provide Eskra, we work with trusted third-party services:
- OpenAI, Google AI, DeepSeek: AI model providers that process email content to generate responses
- Stripe: Payment processing (they handle all credit card information)
- Cloud hosting: Infrastructure providers for servers and databases
- Email providers: Gmail, Outlook, or your custom IMAP/SMTP server
Note: All third parties we work with are contractually required to protect your data and use it only for the specific service they provide.
GDPR and your rights
If you're in the EU or EEA, you have specific rights under GDPR:
- Right to access: Request a copy of all data we hold about you
- Right to rectification: Correct any inaccurate information
- Right to erasure: Delete your account and all associated data
- Right to portability: Export your data in a machine-readable format
- Right to object: Object to processing of your personal data
To exercise any of these rights, contact us at [email protected].
Data retention
We keep your data only as long as your account is active:
- Active accounts: Data retained as long as you use Eskra
- Deleted accounts: All data permanently deleted within 24 hours
- Legal requirements: In rare cases, we may be required to retain certain information for legal compliance
- Billing records: Stripe retains payment records for tax and accounting purposes
Changes to this privacy policy
If we make significant changes to how we handle your data, we'll notify you by email and update this page. You can always view the full privacy policy at eskra.ai/privacy-policy.