Privacy Policy

What we collect

• Google account info — your name and email address, via Google Sign-In.
• Gmail data — with your permission, vbMail reads messages in your Gmail inbox and sent folder to find and import coach replies and outreach emails, and sends email on your behalf when you use the composer. vbMail requests gmail.readonly and gmail.send scopes and never requests broader access than that.
• Recruiting data you enter — universities, coaches, camps, email templates, and notes you add yourself.
• Account metadata — birth year (for the 13+ age check), sign-in timestamps, and invite records.

How we use it

Data is used solely to provide vbMail's features to you: displaying and organizing your recruiting outreach, importing Gmail messages into your history, and sending emails you compose. We do not use your data for advertising, and we do not sell or share it with third parties for their own purposes.

Google user data (Limited Use)

vbMail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Gmail content is never used to serve ads, never sold, and never read by humans except: with your consent, to investigate a bug or support request you've reported, or where required to comply with the law.

Storage & security

Gmail OAuth tokens are encrypted at rest (AES-256-GCM) and are never stored in plain text. All data is stored in a private PostgreSQL database. Access to the app requires a Google sign-in and an invitation from an existing user or admin.

Sharing between accounts

If you invite a parent, guardian, or family member to share your account, that person can view and edit the same recruiting data you can. This is the only way data is shared with another vbMail user.

Data retention & deletion

Your data is retained as long as your account is active. To request deletion of your account and all associated data, contact the site admin at the email below. Disconnecting a Gmail account revokes vbMail's access to it and deletes the stored tokens.

Children's privacy

vbMail is not available to anyone under 13 years of age. New accounts confirm their birth year at sign-up, and accounts identified as under 13 are blocked.

Contact

Questions about this policy or your data can be sent to scott@ssmalone.net.