Privacy Policy

Effective October 30, 2026

Due email is run by Blue Cursor LLC, a company based in Wyoming, USA ("we", "us"). This policy says what we collect, why, who helps us process it, how long we keep it and what you can ask of us. Questions go to denizonatworks@gmail.com.

In short:

• We use your data only to run Due email for you.
• We don't sell it, we don't use it for ads, and we don't use it to train AI models.
• Nothing is sent from your mailbox unless you press Send.
• You can disconnect a mailbox at any time, and ask us to delete everything.

What we collect, and why

When you sign in with Google we receive your email address, to let you in (Google scopes openid and email). We keep a record of each sign-in session: your address, and when the session started and was last used.

When you connect a Gmail account:

• Reading (gmail.readonly): your messages and their details (sender, recipients, subject and dates), so we can show your conversations, sort them and keep track of the opportunities in them.
• Moving to Trash (gmail.modify): used only when you ask us to move messages to Trash, and to bring them back if you press Undo.
• Sending (gmail.send): used only when you press Send on a reply.

We store your messages and conversations in our database so that Due email works between visits.

When you ask to unsubscribe from a sender, we follow that sender's own unsubscribe link. That is either a one-click web request to the sender, or an email or web page that opens on your side for you to send or confirm. We don't send it from your mailbox.

If you choose a meeting notes folder in Google Drive (drive.readonly), we read the files in that folder only, and only when you ask us to scan your notes for an opportunity. Google's permission for this would let an app read every file in your Drive. Due email reads only the folder you choose.

What you create in Due email: opportunities and your changes to them, companies, notes, tags, shortlists, snippets, document links and your settings.

What we keep to run the service:

• A record of each AI request: which model was used, how much text went in and out, the cost, and which conversation it was about. It does not hold the text.
• Request logs kept by our hosting provider for a short time: IP address, browser, page and time.
• Our own server logs record what failed and never the content of your email or the addresses in it.

How we use it

• To provide the service: we use your information only to provide Due email's features:
  • showing and sorting your conversations;
  • finding opportunities and companies in them;
  • drafting, translating and sending replies when you ask;
  • researching a company when you ask.
• To keep the service secure: we use it to protect Due email and your account.
• What we never do: sell it, share it for advertising, or build profiles of you for anyone else.

Legal bases

We process personal information on these grounds:

• To provide Due email to you, under our Terms of Service.
• Your permission, which you give when you connect a Google account and choose a feature. You can withdraw it at any time by disconnecting the account.
• Legitimate interests:
  • keeping Due email secure and working;
  • for the people who write to you and whose information is in your mailbox, handling your business correspondence.
• Legal obligations, when the law requires us to keep or disclose information.

AI processing

Some features send data to AI providers, which return a result to us:

• Anthropic (Claude): the parts of a conversation needed to sort it, to read an opportunity from it, to apply a snippet, and, when you ask, to draft or translate a reply.
• OpenAI: only a company's name and email domain, when you ask us to research that company on the web.

These providers don't use our requests to train their models. Under their own policies, they may keep requests for a limited time, usually up to 30 days, to detect abuse. They keep them longer only when the law requires it or a request is flagged for review. We don't train any AI model on your data.

Google user data

Due email's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular:

• We use Google user data only to provide and improve the user-facing features of Due email described above.
• We transfer it to others only as those features need (the providers listed below), to keep the service secure, to comply with the law, or with your consent.
• No person reads your Google user data, except:
  • with your consent;
  • when it is needed for security, such as investigating abuse;
  • to comply with the law;
  • when it has been aggregated and anonymized and is used only to run the service.
• We don't use it for advertising, and we don't use it to develop, improve or train generalized AI or machine learning models.

Who processes data for us

When data goes to a provider in another country, for example an AI provider in the United States, we rely on the safeguards in that provider's data processing terms. Where the GDPR applies, those are the EU's standard contractual clauses. We tell you before adding a provider that handles your email.

How long we keep it

• While you use Due email: we keep your data.
• When you disconnect a Gmail account:
  • We ask Google to end our access.
  • We delete that account's messages and conversations from our database right away.
  • Records you built from them (opportunities, companies, notes) stay until you delete them or ask us to.
• When you ask us to delete your account: we delete your data from our systems within 30 days.
• Copies we don't control: our AI providers' short-lived abuse-monitoring copies, described under AI processing. These end on the providers' own schedules.
• Backups:
  • Our database provider keeps restore points for up to 24 hours.
  • Any other backup copies are deleted within 30 days.
• Sign-in sessions: each ends after 30 days, or after 7 days without use.

Your rights

You can ask us to:

• show you the personal data we hold about you;
• correct it;
• delete it;
• send it to you in a common format;
• stop or limit using it.

You can withdraw our access to your Google account at any time from your Google Account's security settings (third-party connections), or by disconnecting it in Due email.

Depending on where you live, privacy laws such as the EU's GDPR or US state laws give you these rights. We honor these requests for everyone who uses Due email.

Write to denizonatworks@gmail.com. We answer within 30 days. If you are not satisfied, you can complain to the data protection authority where you live.

If you are someone who wrote to a Due email user, your messages are in their mailbox and they decide how to use them. You can contact them, or us, and we will help.

Cookies and local storage

We use only what Due email needs to work. There are no analytics, advertising or tracking cookies.

Security

We protect your data with encryption, a strict sign-in and limits on access. The Security overview describes what we do. If a breach affects your personal data, we tell you without undue delay, and notify authorities as the law requires.

Children

Due email is for professional use and not for anyone under 18.

Changes to this policy

We may update this policy. For a meaningful change we tell you at least 14 days ahead, by email or in the app. The date at the top shows the latest version.

Contact

Blue Cursor LLC, 30 North Gould Street, Ste R, Sheridan, WY 82801, USA, denizonatworks@gmail.com