Connected email privacy
Updated 5 November 2026. This notice covers Booketti's Google and Microsoft email integration.
Controller and contact
Israel Luri Terrés operates Booketti. For questions or requests about data in this integration: support@booketti.com.
Optional connection
You can authorize Google or Microsoft to send gallery, delivery and test messages from your account. You sign in directly with the provider. Booketti does not request or store your Google or Microsoft password.
Data and permissions
The integration obtains your email address and, when supplied by Microsoft, your display name. It requests basic identification and permission to send mail. It does not request permission to read your inbox, search or delete messages, or access your contacts.
Use and recipients
To send messages, Booketti's server processes the sender, recipients and message content and transmits them to the connected provider, Google or Microsoft, for delivery. Data obtained from Google is used only for this functionality: it is not sold or used for advertising, advertising profiles or AI training.
Who we share Google user data with
Booketti's server, hosted by IONOS, processes the data needed to connect your account and send messages. IONOS provides the hosting infrastructure. When you connect Gmail, we transmit the authorization and the data needed to send the message to Google: sender, recipients and content. Google delivers the message to the recipients you specify and their email providers. Connecting Gmail does not transfer your Google data to Microsoft. We do not sell Google user data or share it with advertising networks or AI training providers.
How we protect data
Requests to Google and Microsoft use HTTPS to protect data in transit. Refresh tokens and temporary authorization data are encrypted with AES-256-GCM before storage in the database. The encryption key is held in private server configuration, separately from those encrypted values. Email settings are associated with the authenticated Booketti account. The connection uses PKCE and a single-use state that expires after ten minutes to validate the provider callback. These measures protect authorization credentials; they do not mean that all application data is encrypted at rest.
Storage
Booketti stores the sender address, configuration and an encrypted renewable authorization while the connection remains active, unless replaced or deleted. This authorization enables sending without signing in each time.
Disconnect and withdraw permission
Disconnect removes the authorization from Booketti's operational database and prevents new sends through that connection. It does not delete your account or sent messages. The sender address may remain in settings. You can also revoke access in Google or Microsoft; disconnecting in Booketti does not itself revoke permission with the provider. To request deletion of retained data, contact support@booketti.com.
Google API data
Booketti's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Google API Services User Data Policy