Privacy

Last updated 25 September 2026

Spamasubi labels unwanted sales emails in your Gmail. No person reads your email, we never save its text, and we don’t sell your data or use it for ads.

What we access

When you connect Gmail, you allow Spamasubi to read and label your email. Google also tells us your email address and an ID for your Google account, which is how we recognise you when you sign in. We use that access only to sort your inbox:

• For each new email, we read who sent it, the subject, the date and its labels.
• We read an email’s text only when it’s from someone you’ve never written to, to check whether it’s unwanted.
• We add and remove Spamasubi’s labels, and move caught emails out of your inbox unless you keep them there in Settings.
• We never send, reply, delete or mark anything as read.

What we send to be checked

Emails from people you know are sorted on our servers from their sender and labels alone; their text isn’t downloaded and nothing about them is sent anywhere else. For an email from a stranger, we send our AI provider, which decides whether it’s unwanted:

• the sender and subject;
• the first 1,000 characters of the text, without signatures or quoted replies;
• whether it has an unsubscribe link, and a note that you’ve never written to the sender;

Before anything is sent, your name, your website, any words you list in Settings (such as your business name), email addresses, and phone, card and account numbers are replaced with placeholders. Our AI provider says it doesn’t train its models on what we send.

When you correct emails, we also update a short learned rule you can see, edit and clear in Settings. To write it, we send an AI provider your rules, the current learned rule, and the subject lines of your corrections, with the sender’s domain for unwanted ones. Never their text. Once the rule is updated, we delete those subjects and senders.

What we keep

• For emails we checked in the last 30 days: Gmail’s ID, labels and date, and our verdict. That stops a repeat check from sending them again.
• For emails you correct: your verdict. Their sender and subject are kept only until they’re folded into your learned rule, usually within minutes, then deleted.
• For emails we moved out of your inbox: Gmail’s ID, so Not spam can bring them back.
• A fingerprint of each address you’ve written to, so we don’t search your sent mail for it again. It can’t be turned back into the address.
• Your settings, including your learned rule, and the token Google gives us to reach your Gmail.

We never save email text. The sender, subject and preview shown on your account page are read from Gmail when you open it, and aren’t saved.

What we keep is encrypted in our database, one account at a time, with keys held separately from the database. Our servers and database are in the United States.

Who else handles your data

• Google, which runs Gmail and tells us when your inbox changes.
• Our AI providers, which check emails from strangers and write your learned rule, as described above.
• Our hosting provider, which runs the website and the app.
• Our database provider, which stores our encrypted database.

Each handles your data only to provide its service to us. We don’t sell your data, use it for ads, or share it with anyone else.

Your choices

• Pause Spamasubi at any time from your account page.
• Disconnect it in your Google Account connections. That ends its access to your Gmail.
• Delete your account from Settings on your account page. We stop Gmail’s notifications, end our access to your Gmail, and delete everything we keep about you straight away. Copies in our database backups are gone within 7 days. Spamasubi’s labels stay in your Gmail until you remove them.

Contact

Questions about your data? Email contact@spamasubi.com.

Google user data

Spamasubi’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.