Privacy policy
Courier is an email and calendar client for Microsoft 365 and Gmail, made as a personal project. This policy explains what Courier accesses, where it is kept and how to remove it.
What Courier accesses
When you connect an account, Courier asks for access to:
- Email: your messages, folders and labels, so you can read, write, send and organize mail.
- Calendar: your calendars and events, so you can see, create and answer them.
- Profile: your name, email address and, for Microsoft 365, your colleagues' profile photos.
- Courier's own settings: a settings file in Google Drive's hidden app data folder, or a hidden folder in your Microsoft 365 mailbox. Courier can't see any other files.
Where your data is kept
Your mail, calendar and settings are stored in your browser, on your own device. Courier talks to Google and Microsoft directly from your browser. They aren't copied to a Courier server.
Courier runs a small server for two jobs only:
- Signing in to Google. It exchanges the sign-in code for access tokens and returns them to your browser. It doesn't store tokens or read your mail.
- Sender logos. It looks up a company's logo by the domain of a sender's email address, such as example.com, using Google's public favicon service. Only the domain is sent, never the message or the address.
When you choose to show the images in a message, your browser loads them from the sender's servers.
How your data is used
Your data is used only to show and manage your own mail and calendar in Courier. It isn't sold, shared with anyone, used for advertising or used to train AI models.
Courier's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Removing your data
- Remove an account in Courier to delete its mail and calendar from your browser.
- Revoke Courier's access at any time in your Google account or in My Apps for Microsoft 365.
- Delete Courier's settings file in Google Drive under Settings, Manage apps, Courier, Delete hidden app data.
Changes
If this policy changes, the new version is posted on this page with a new effective date.