Privacy Policy
Last updated: October 18, 2026
1. Introduction
This Privacy Policy describes how Attachment Hippo ("we," "our," or "us") collects, uses, and handles your information when you use our Google Workspace Add-on service.
2. Information We Collect
2.1 User-Provided Information
- Email addresses and other criteria specified in your rules
- Rule configurations and preferences
- Google Drive folder selections
2.2 Automatically Collected Information
- Message IDs of processed emails
- Sender name and email address, and subject line, of processed emails (used to show you a record of what was saved)
- Attachment filenames and file metadata (size, type) — attachment contents are saved directly to your Google Drive and are not separately stored by us
- Processing duration metrics
- Number of attachments processed
- Number of rules created and stored
- Subscription plan type, billing period dates, and payment processor customer/event identifiers (no payment card data)
- Performance and usage statistics
2.3 How We Protect This Information
We classify the data we handle by sensitivity and apply protections appropriate to each level. In particular:
- All data is encrypted in transit and at rest (AES-256, Google Cloud managed keys).
- Your data is processed only on our servers; there is no direct client access to our database, and you can access only your own data.
- Authentication tokens and service credentials are kept in Google's secure secret storage and are never exposed to client-side code.
- We request minimal OAuth permissions: read-only Gmail access and access only to Drive files the add-on creates or you select.
- Email bodies and attachment contents are never stored by us. Attachments are saved directly to your own Google Drive; we keep only the metadata listed above so we can show you a record of what was saved.
- We never collect, transmit, or store payment card data. All payment details are handled by our PCI-compliant payment processor, Paddle.
3. How We Use Your Information
We use the collected information for:
- Operating and maintaining the Service
- Processing email attachments according to your rules
- Improving the Service performance
- Analyzing usage patterns and service metrics
- Tracking and enforcing plan-specific rule limits
- Communicating with you about the Service
4. Data Storage and Security
4.1 Infrastructure
The Service runs on Google's infrastructure. All data we store is processed and stored using Google Workspace and Google Cloud services. Limited data is shared with the service providers listed in Section 7 only where necessary to operate the Service.
4.2 Data Protection
We implement appropriate technical and organizational measures to protect your data, including:
- Secure processing within Google's infrastructure
- Mandatory email verification for file operations
- Access controls and authentication measures
5. Data Retention
We retain your data for as long as necessary to provide the Service and comply with our legal obligations. You may request deletion of your data at any time by contacting us.
6. Analytics and Monitoring
We use:
- Google's logging services for operational monitoring. To troubleshoot account and subscription issues, these logs may include your email address. Logs never contain your email content, attachments, or payment details, are accessible only to our administrators, and are deleted automatically after 30 days.
- BigQuery for analyzing service performance and usage patterns
- Google Firestore for data storage
The add-on itself uses no third-party analytics. Our website (attachmenthippo.com) uses Google Analytics and Umami to collect aggregate visit statistics; this data is not linked to your add-on account.
7. Information Sharing
Important Notice
We do not share your personal information with third parties except:
- As required by law
- When necessary to provide the Service
- With your explicit consent
We use the following service providers, who process data only on our behalf:
- Google (Google Workspace, Google Cloud, Firebase) — hosting, data storage, and logging
- Paddle — payment processing and subscription management (your email address, name, and billing details)
- Brevo — sending service emails, such as plan-limit notifications (your email address, name, and plan type)
8. Your Rights
You have the right to:
- Access your personal information
- Request deletion of your data
- Opt-out of future communications
To exercise these rights, contact us at attachmenthippo@gmail.com.
9. Changes to This Privacy Policy
We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date.
10. Google Workspace Integration
10.1 Scope of Access
Our Service integrates with Google Workspace and requires specific permissions to:
- Access your Gmail account to process attachments
- Access your Google Drive to save files
- Store configuration data in Google's infrastructure
10.2 Google's Privacy Policy
Our Service operates within Google's infrastructure and is subject to Google's privacy and security standards. We recommend reviewing Google's Privacy Policy to understand how Google processes your data.
