Privacy Policy

Last updated: September 18, 2026

1. Introduction

Welcome to Aigen. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

By using our service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

For questions about your data:

Website: aigenemail.com
Contact: support@aigenemail.com
Privacy Requests: support@aigenemail.com

3. Information We Collect

3.1 Information You Provide

When you generate an email, we collect:

• Email Generation Data: Email type (professional, follow-up, thank-you, apology, introduction, request, invitation, resignation, cover letter), recipient name/title, subject line, context details, tone preference (professional/friendly/formal/casual/persuasive), and length (short/medium/long)
• Generated Email Content: The AI-generated email text, stored temporarily for 24 hours and then automatically deleted
• Account Information: Email address, password (hashed), and account preferences for authenticated users

3.2 Automatically Collected Information

• Technical Data: Your IP address (used for rate limiting and abuse prevention)
• Cookies: Essential cookies for sign-in/session and cookie consent preferences (LocalStorage)
• Error Logs: Server logs for debugging and security (automatically rotated and cleaned up)

3.3 What We DON'T Collect

• No payment or billing data (we do not process payments)
• No marketing or tracking data
• No marketing cookies
• No social media tracking
• No third-party advertising tracking

4. How We Use Your Information

We use your information ONLY for:

• Service Provision: To send your input to Google Gemini API and generate your email using the gemini-2.5-flash model
• User Authentication: To manage your account and provide personalized experience
• Temporary Storage: To store your generated email for 24 hours so you can copy it
• Security & Rate Limiting: To prevent abuse with rate limiting (60 requests per minute per IP)
• Error Logging: For troubleshooting and improving service reliability (logs are rotated and deleted)

We do NOT: Analyze your data for marketing, train AI models on your emails, sell your data, share with third parties (except Google for AI generation), or use it for advertising.

5. Legal Basis for Processing (GDPR)

Under GDPR, we process your personal data based on the following legal grounds:

• Contractual Necessity: Processing is necessary to provide our service to you
• Legitimate Interests: To improve our service, prevent fraud, and ensure security
• Legal Obligation: To comply with applicable laws and regulations

6. Data Retention

We retain your data for these periods:

• Generated Email Content: Automatically deleted after 24 hours
• Error Logs: Rotated when reaching 5MB, kept for 30 days maximum, then deleted
• Rate Limit Data: Cleaned up after 1 hour of inactivity

7. Third-Party Services

7.1 Google Gemini API (AI Processing)

We use Google's Gemini API (gemini-2.5-flash model) to generate email content. Your input data (email type, recipient, subject, context, tone, length) is sent to Google's servers for processing. Google's use of this data is governed by their Privacy Policy and Gemini API Terms.

8. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): Request deletion of your data
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Lodge a Complaint: File a complaint with your local data protection authority

Exercising Your Rights

To exercise any of these rights, please contact us at support@aigenemail.com with "GDPR Request" in the subject line. We will respond within 30 days.

9. Cookies

We use essential cookies and local storage to keep you signed in and to remember your cookie-banner choice. These are required for the site to work and cannot be disabled. We do not use analytics, advertising, or other optional cookies.

10. Data Security

We implement appropriate technical and organizational measures to protect your data:

• HTTPS encryption for all data transmission
• Secure server infrastructure
• Access controls and authentication
• Regular security audits and updates
• Automatic data deletion after 24 hours

11. International Data Transfers

Your data may be transferred to and processed in countries outside the EU/EEA. We ensure adequate protection through:

• Standard Contractual Clauses approved by the EU Commission
• Adequacy decisions for certain countries
• Service providers with strong data protection measures

12. Children's Privacy

Our service is not intended for users under the age of 16. An account is required. We do not knowingly collect personal data from children. If we discover that we have collected data from a child, we will delete it immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last updated" date
• Notifying you of changes through this website (we do not send email notifications)

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us:

Privacy Requests: support@aigenemail.com
General Support: support@aigenemail.com

15. Supervisory Authority

If you are in the EU/EEA and have concerns about our data processing practices, you have the right to lodge a complaint with your local supervisory authority:

List of EU Data Protection Authorities