Privacy Policy

Zer0 Email is operated by PopPush AI ("we", "us", or "our"). This Privacy Policy explains what personal data we collect, how we use it, with whom we share it, and your rights over it. By using Zer0 Email, you agree to the practices described in this policy.

1. Who we are and how to contact us

Zer0 Email is a product of PopPush AI. If you have any questions about this Privacy Policy or wish to exercise your legal rights, please contact us at:

PopPush AI Email: founder@zer0email.com

2. Data we collect about you

We collect and process the following categories of personal data:

  • Account data: Name, email address, and account credentials
  • Google account data: Name, email address, and profile picture obtained via Google OAuth
  • Gmail data: Email messages, email metadata (sender, recipient, subject line, date, thread ID), labels, and mailbox folder structure
  • Microsoft Outlook data: Email messages, metadata, folders, and mailbox structure
  • Financial data: Billing information and payment details (processed by our payment provider; we do not store full card numbers)
  • Usage data: Features used, rules and automations created, and interaction patterns within Zer0 Email
  • Technical data: IP address, browser type, device type, operating system, time zone, and log data

We may also create aggregated, de-identified, or anonymized data from personal data we collect. This anonymized data cannot be used to identify you and may be used to analyze, improve, and promote Zer0 Email.

3. How we collect your data

We collect data through:

  • Direct interactions: When you register, connect email accounts, configure rules, or contact us
  • Automated technologies: When you use Zer0 Email, we automatically collect technical and usage data
  • Third-party OAuth providers: Google and Microsoft provide us with profile and mailbox access when you authorize Zer0 Email

4. Legal basis for processing

We process your personal data only where the law permits. The legal grounds we rely on are:

  • Performance of a contract: To provide and operate the Zer0 Email service you have signed up for
  • Legitimate interests: To improve the service, maintain security, and manage our business — where your rights and interests do not override ours
  • Legal obligation: Where processing is required to comply with applicable law

5. How we use your information

We use your data to:

  • Create and manage your account
  • Authenticate you with Google and Microsoft via OAuth 2.0
  • Connect, sync, and display your mailboxes within Zer0 Email
  • Apply AI-powered rules, filters, labeling, archiving, and inbox automation
  • Maintain, secure, troubleshoot, and improve the service
  • Provide customer support
  • Comply with legal obligations

6. Google user data

Specific data accessed: When you connect your Google account, Zer0 Email accesses the following through the Gmail API:

  • Gmail messages (read, modify, archive, or delete — as directed by you or your automation rules)
  • Email metadata: sender, recipient, subject line, date, and thread identifiers
  • Gmail labels and folder structure
  • Google profile information: name and email address

How we use Google user data: Google user data is used solely to provide and improve the Zer0 Email features you request. We do not use Google user data for advertising, profiling, or any purpose unrelated to operating Zer0 Email.

Limited Use Policy: Zer0 Email's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we do not:

  • Use Google user data to serve advertisements
  • Use Google user data to profile users for purposes unrelated to the app
  • Sell, rent, or transfer Google user data to third parties
  • Use Google user data for any purpose beyond providing and improving Zer0 Email

Revoking Google access: You can revoke Zer0 Email's access to your Google account at any time by visiting myaccount.google.com/permissions and removing Zer0 Email. You may also contact us to disconnect your account directly.

7. AI processing of your data

Zer0 Email uses AI and machine learning to power inbox automation features such as rule generation, email categorization, and smart suggestions.

Data shared with AI models: To deliver these features, the following data may be processed by AI models:

  • Email subject lines
  • Email body text
  • Sender and recipient information
  • Labels and folder names

No AI training on your data: We do not allow our AI service providers to train their models using your personal data or email content. Your data is used only to generate results for you within the Zer0 Email service.

Zero data retention: We operate under a zero data retention policy with our AI providers, meaning your data is not stored on AI provider servers after a response is generated.

Your consent: Before sharing your email data with AI models, we obtain your explicit consent within the Zer0 Email application.

8. Microsoft Outlook user data

When you connect your Microsoft Outlook account, Zer0 Email accesses email messages, metadata, and folder structure through the Microsoft Graph API. This data is used solely to provide the inbox organization and automation features of Zer0 Email. We do not sell or transfer Outlook user data to third parties for any other purpose.

9. Data sharing and disclosure

We do not sell personal information or Google user data. We share data only in the following limited circumstances:

  • Service providers: We share data with infrastructure, cloud hosting, database, and technology partners strictly to operate Zer0 Email. These providers are contractually prohibited from using your data for their own purposes.
  • AI providers: As described in Section 7 above, limited email content is shared with AI providers under strict no-training and zero-retention agreements.
  • Legal compliance: We may disclose data when required by law, court order, or a governmental authority.
  • Business transfers: If PopPush AI is acquired or merges with another company, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

We do not transfer Google user data to third parties for advertising, profiling, or any purpose other than providing or improving Zer0 Email.

10. International data transfers

Some of our service providers are based outside your country. Whenever we transfer personal data internationally, we ensure an equivalent level of protection by using:

  • Standard Contractual Clauses (SCCs) approved by the relevant supervisory authority, or
  • Other lawful transfer mechanisms as required by applicable data protection law

Contact us if you want further information on the specific mechanisms used for your data transfers.

11. Data security

We take the security of your data — especially sensitive Gmail and Outlook data — seriously. Our measures include:

  • Encryption in transit: All data between your browser, our servers, and third-party APIs is encrypted using TLS (Transport Layer Security)
  • Encryption at rest: Email data and personal information stored on our servers is encrypted at rest
  • Access controls: Access to user data is restricted to authorized personnel on a strict need-to-know basis
  • OAuth 2.0: We use official OAuth 2.0 protocols — we never store your Google or Microsoft passwords
  • Data breach procedures: We have procedures in place to detect, investigate, and respond to personal data breaches. We will notify you and any applicable regulator of a breach where legally required to do so

No method of transmission or storage is completely secure. If you believe your account has been compromised, please contact us immediately at founder@zer0email.com.

12. Data retention and deletion

We retain your personal data for as long as your account is active or as needed to provide the service and meet our legal obligations.

Account deletion: You may request deletion of your account and all associated data by contacting us at founder@zer0email.com. We will delete your personal data within 30 days of a verified request, except where retention is required by applicable law.

Mailbox disconnection: When you disconnect a linked Google or Outlook account, we stop accessing that mailbox and delete cached email data associated with it within 30 days.

13. Your legal rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete personal data
  • Erase your personal data (right to be forgotten)
  • Object to processing where we rely on legitimate interests
  • Restrict processing of your data in certain circumstances
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time where processing is based on consent (including AI processing)
  • Revoke Google access at myaccount.google.com/permissions

To exercise any of these rights, contact us at founder@zer0email.com. We will respond to all legitimate requests within one month. If your request is complex, we may extend this by a further two months and will notify you accordingly. There is no fee to exercise these rights.

14. Children's privacy

Zer0 Email is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

15. Cookies

We use cookies and similar technologies to operate our website and service. For details, please refer to our Cookie Policy.

16. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes — particularly changes that affect how we handle Google user data or your rights — we will notify you by:

  • Sending an email to the address associated with your account
  • Displaying a prominent notice within the Zer0 Email application

The updated policy will carry a revised "Last updated" date. Continued use of Zer0 Email after changes are posted constitutes your acceptance of the updated policy.