Privacy Policy
Last updated: April 2026
1. Data Controller
The controller responsible for data processing on this platform is:
Dominik Grusemann Ventures UG (haftungsbeschränkt)
Germaniastr. 10
80802 München, Germany
Email: info@usemarbles.com
2. What Data We Collect
When you connect your Gmail account, we collect and process the following categories of personal data:
Account information: Your email address and basic profile information from your Google account.
Email content: The content, metadata, and attachments of your emails, which we access to provide filtering, categorization, and summary features.
Usage data: Information about how you interact with our service.
3. Legal Basis and Purposes of Processing
We process your personal data based on the following legal grounds under Article 6 GDPR:
Contract performance (Art. 6(1)(b) GDPR): Processing your email data is necessary to provide the Langmail service you have requested, including email filtering, categorization, and summarization.
Consent (Art. 6(1)(a) GDPR): Where required, we obtain your explicit consent before processing. You may withdraw consent at any time by disconnecting your account.
We do not sell your data. We do not show you ads. We do not share your data with third parties except as necessary to provide the service as described in Section 4.
4. Data Recipients and Transfers
Your data is processed by the following service providers, all located in the EU:
Hetzner (Germany) – Cloud infrastructure
Supabase (EU) – Database and authentication
Mistral AI (France) – Email classification and summarization
Langfuse GmbH (Germany) – LLM observability and tracing
We do not transfer personal data outside the EEA.
5. Google User Data
Langmail accesses your Gmail account through the Google API. This section describes how we handle data obtained from Google APIs.
What we access: We read your email messages, metadata (sender, recipient, subject, date), and labels to provide email filtering, categorization, and summarization features.
How we use it: Your Gmail data is used solely to provide the Langmail service features you have requested. We analyze email content to categorize messages, generate summaries, and help you manage your inbox.
How we store it: Email data is stored on EU-based servers (Hetzner, Germany) and retained for 30 days to provide the service.
How we share it: Gmail data is shared with Mistral AI for processing (classification and summarization) and with Langfuse GmbH for LLM observability and tracing. We do not sell, rent, or share your Gmail data for advertising purposes.
Limited Use Disclosure: Langmail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:
- We only use Gmail data to provide and improve the user-facing features of Langmail that are visible to you.
- We do not transfer Gmail data to third parties except as necessary to provide the service, with your consent, or as required by law.
- We do not use Gmail data for advertising or to serve ads.
- We do not allow humans to read your Gmail data unless you provide affirmative consent, it is necessary for security purposes, or it is required by law.
6. Data Retention
Email data is retained for 30 days to provide the service. Account information is retained for the duration of your account. Upon account deletion or at your request, all personal data will be deleted within 30 days, unless legal obligations require longer retention.
7. Your Rights Under GDPR
Under the General Data Protection Regulation, you have the following rights:
Right of access (Art. 15): You can request a copy of the personal data we hold about you.
Right to rectification (Art. 16): You can request correction of inaccurate personal data.
Right to erasure (Art. 17): You can request deletion of your personal data.
Right to restriction (Art. 18): You can request that we limit how we use your data.
Right to data portability (Art. 20): You can request your data in a machine-readable format.
Right to object (Art. 21): You can object to certain types of processing.
Right to withdraw consent: You can withdraw consent at any time by disconnecting your account in the settings.
To exercise any of these rights, please contact us at info@usemarbles.com. We will respond within 30 days. You also have the right to lodge a complaint with the Bayerisches Landesamt für Datenschutzaufsicht (BayLDA), Promenade 18, 91522 Ansbach, Germany (www.lda.bayern.de).
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS) and at rest, access controls, and regular security assessments. Access to your data is strictly limited to personnel who need it to provide the service.
9. Automated Decision-Making
Our service uses automated processing, including AI-powered email classification and summarization. These automated processes help organize and prioritize your emails but do not make decisions that produce legal effects or similarly significantly affect you. You can adjust or override any automated categorization within the application.
10. Changes to This Policy
We may update this privacy policy from time to time. We will notify you of material changes by email or through the service before they take effect. The current version is always available at langmail.me/privacy.
11. Contact
For privacy questions or to exercise your rights, contact us at:
Dominik Grusemann Ventures UG (haftungsbeschränkt)
Germaniastr. 10, 80802 München, Germany
Email: info@usemarbles.com