Privacy Policy for Ardi Gmail Bot

Effective date: 12 December 2025

Ardi Gmail Bot (“the Bot”, “we”, “us”, or “our”) is a Telegram bot that allows users to log in with their Google account, check for verification codes in unread emails, and generate email address variations. We respect your privacy and are committed to protecting your data.

1. Information We Access

When you connect your Google account to Ardi Gmail Bot, we may access the following information from your Gmail account:

• Your Gmail email address.
• Unread email metadata (message ID, labels, basic headers).
• Email body text of unread messages only as needed to search for 5–8 digit verification codes.
• Label state of messages (e.g. UNREAD / READ).

We do NOT access or store your full inbox or historical email content beyond what is required to extract verification codes.

2. How We Use This Information

We use the data described above solely to:

• Authenticate you using Google OAuth 2.0.
• Retrieve unread emails to extract 5–8 digit verification codes and display them to you in Telegram.
• Mark processed messages as read so you can see which codes have already been handled.
• Determine your Gmail address to generate email variation suggestions (aliases).

We do not use your Gmail data for advertising, analytics, or any unrelated purposes.

3. Data Storage

The only data we store on our server is:

• OAuth tokens (access token, refresh token, expiry information) associated with your Telegram user ID.

These tokens are stored in files on our secure VPS in a path similar to: tokens/<telegram_user_id>.json

We do NOT store:

• Email message bodies.
• Email headers or subjects long-term.
• Verification codes after they are displayed to you.

4. Data Sharing

We do not sell, rent, or share your Gmail data or tokens with any third parties.

Your data is used only to provide the features of Ardi Gmail Bot as described in this policy.

5. Data Security

Our server is secured using industry-standard practices, including:

• Restricted SSH access to the VPS.
• File-based separation of user tokens.
• No public access to the tokens directory.

While we take reasonable steps to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

6. Your Choices and Revoking Access

You are in full control of your connection to Ardi Gmail Bot:

• At any time you may use the “Logout” command in the bot, which deletes your token file and disconnects your Google account from the Bot.
• You may also revoke the Bot’s access directly from your Google Account by visiting: https://myaccount.google.com/permissions

After revocation, the Bot will no longer be able to access your Gmail data until you log in again through OAuth.

7. Children’s Privacy

Ardi Gmail Bot is not directed to children under the age of 13. We do not knowingly collect personal information from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

9. Contact

If you have any questions about this Privacy Policy or how we use your data, you can contact us at: ardikoraiinfconbinkieworjhe3wq@gmail.com