Privacy
Mailmeteor is a trusted email marketing platform that sends millions of emails every month. From the start, we have made privacy a core part of Mailmeteor because we wanted to build a service we would trust with our own data.
Below, we explain the permissions Mailmeteor requests and how we handle your data. You can also learn more about how we keep our platform safe.
What permissions does Mailmeteor need?
When you connect your Google or Outlook account, you authorize Mailmeteor to send emails on your behalf. Additional permissions depend on your email provider and the features you use. Select your provider below to see which permissions are requested and why.
When installing Mailmeteor for the first time from a Google account, you’ll see a prompt similar to the following, with all the permissions required to make the add-on run:
.png)
Here’s a breakdown of the permissions required when installing Mailmeteor for Google Sheets for the first time:
| Permissions | Why does Mailmeteor require this permission? |
|---|---|
| See, edit, create and delete your spreadsheets in Google Drive | Mailmeteor’s essential functions are done from within your Google Sheets (such as filtering emails, adding a tracking report, sending personalized emails). |
| Send email on your behalf | Mailmeteor’s core function is to send emails automatically from Gmail. This permission allows Mailmeteor to send emails with Gmail. It is used only in this context. |
| Connect to an external service | Allows Mailmeteor to send and retrieve information from Firebase, a real-time database from Google. Your data stays inside Google’s environment. |
| Display and run third-party web content in prompts and sidebars inside Google applications | This scope is required to display sidebars inside Google applications. Mailmeteor uses this permission to display the tracking report. |
When you start using some advanced features (such as automatic follow-ups), we may require other permissions. In such cases, we will ask for those additional permissions when needed. You can review at any time which permissions are granted to Mailmeteor right from your Google account.
For the standard Outlook connection, Mailmeteor requests permission to identify your Microsoft account and send emails on your behalf. Features such as reply detection and automatic follow-ups also require access to your mailbox.
| Permission | Why does Mailmeteor require this permission? |
|---|---|
Send mail as you (Mail.Send) |
Allows Mailmeteor to send the emails you prepare, including campaigns and automatic follow-ups, through your connected Microsoft account. |
Sign in and read your profile (User.Read) |
Allows Mailmeteor to identify the Microsoft account you connect. |
Read and write access to your mail (Mail.ReadWrite) |
Allows Mailmeteor to create drafts before sending and read messages to detect replies and bounces. This supports reply detection and follow-up sequences. |
Maintain access to data you have given it access to (offline_access) |
Allows Mailmeteor to renew its connection without asking you to sign in each time, so scheduled emails and follow-ups can run while you are away. |
Sign-in information (openid, profile, email) |
Allows Mailmeteor to sign you in and identify your account using information such as your name and email address. |
Microsoft defines what each permission allows. You can find the details in its permissions reference and sign-in permissions documentation.
Are additional permissions needed for email warm-up?
Email warm-up uses a separate authorization flow. It requests Mail.Send, Mail.ReadWrite, and User.Read, along with sign-in permissions.
It also requests MailboxSettings.ReadWrite, which allows access to read and change mailbox settings. This permission is part of the warm-up integration and is not requested by the standard Outlook campaign connection.
What data is stored by Mailmeteor and how is it used?
Here’s all the data we save in order to make Mailmeteor work and provide you with an intuitive experience:
- Your email address - to identify your account
- If you are a paying customer, your name and address to confirm payments
Then, when you send a campaign with Mailmeteor, we save additional data:
| Resource | Data saved | Data retention period |
|---|---|---|
| Events | Date and time of the event (e.g. "email.sent") as well as the associated resource content. | 90 days |
| Email events | Date of an open, click, unsubscribe or reply. | 90 days |
| Emails | Recipient's email address, merge fields (aka variables). | 180 days |
| Email follow-up | Triggers and delay between each message in a sequence. | 180 days |
| Templates | Raw content of your template including attachments (if any). | Unlimited* |
| Contacts | Your recipient's email address and associated details. | Unlimited* |
| Campaign | Name, date of creation, source. | Unlimited* |
* You can manually delete these resources at any time from the Dashboard.
Data retention periods apply to customers on both our free and paid plans.
FAQ
What does Mailmeteor do with users’ data?
Your data stays your data. We process and save it only to help you send email marketing campaigns.
Does Mailmeteor have a Privacy Policy?
Yes. It’s available on our website at https://mailmeteor.com/privacy-policy
Does Mailmeteor engage third-party subprocessors?
To focus on what we know best, Mailmeteor uses third-party solutions. These subprocessors might have access to or process personal data from our customers. The list of these subprocessors is available here.
How does Mailmeteor tracking work?
Every time you send a campaign with email tracking enabled, we generate random and unique Mailmeteor IDs for each recipient in order to track opened emails and clicks. These IDs are added as notes to each cell in the “Merge status” column.
Email data is anonymized and minimized. Mailmeteor never stores the email addresses of recipients who opened or clicked emails. Mailmeteor does not store the IP addresses of your recipients either.
You can turn off email tracking before sending a campaign by unchecking the box “Track emails opened and clicked”.
How can I access or delete my data?
You can manually delete your data at any time from the Dashboard.
You have also a right of access, correction and removal of your personal data which you may exercise by sending an email to [email protected].