Privacy Policy

Overview

Intercept ("we", "us", or "our") operates useintercept.com. This policy describes what information we collect, how we use it, and what rights you have over it. We take your privacy seriously — our entire product is built on the premise that you should control who can reach you.

Google API Limited Use Disclosure

Intercept's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically: we only access Gmail™ data to provide the email filtering service described to you. We do not use Gmail™ data for advertising, do not allow humans to read your email (except at your explicit request for debugging), do not use Gmail™ data to train AI models, and do not transfer Gmail™ data to third parties except as necessary to operate the service.

What data we access from Gmail™

We request three Gmail™ API scopes:

• gmail.readonlyTo detect new incoming emails and read the sender address, subject line, and timestamp. We never read email body content.
• gmail.sendTo send automated challenge emails to unknown senders on your behalf, asking them to verify they have the right to email you.
• gmail.modifyTo apply the "Cooling Off" label and move unknown sender emails out of your inbox until they are verified or approved.

What we store

We store only the minimum data required to operate the service:

• Your Gmail™ address (to identify your account)
• OAuth refresh tokens (encrypted, used to access Gmail™ on your behalf)
• Sender email addresses, display names, and email subjects (to build your whitelist/blocklist)
• Sender status: whitelisted, cooling off, or blocked
• Timestamps of the last email received from each sender
• Magic link tokens (one-time, expire in 15 minutes)

We never store email body content. Ever.

How we use your data

• To operate the email filtering and challenge service
• To send you sign-in links (magic links) via email
• To send automated challenge emails to unknown senders on your behalf
• To build and maintain your sender whitelist from your sent email history

We do not sell your data. We do not use your data for advertising. We do not share your data with third parties except as described below.

Third-party services

• Supabase — database hosting (US). Stores your account data and sender lists.
• Vercel — application hosting (US/global edge). Processes requests.
• Resend — transactional email (magic link delivery only).
• Google — Gmail™ API access. Governed by Google's own privacy policy.

Data retention

We retain your account data for as long as your account is active. If you delete your account, we delete all associated data within 30 days. Sender metadata (whitelist/blocklist entries) is deleted with your account. You can request deletion at any time by emailing hello@useintercept.com.

Security

OAuth refresh tokens are stored encrypted. All data is transmitted over HTTPS. We use short-lived magic links for authentication — no passwords are stored. We follow security best practices and review access controls regularly.

Your rights

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and all associated data
• Revoke Gmail™ access at any time via your Google account permissions page

To exercise any of these rights, email hello@useintercept.com.

Changes to this policy

We may update this policy from time to time. We'll notify you of material changes by email or by posting a notice on the site. The "last updated" date at the top will always reflect the most recent revision.

Contact

Questions about this policy? Email us at hello@useintercept.com.