Privacy Policy for Pilotflow by Zippy

Last Updated: February 23, 2026

1. Introduction

Bright Softwares (“we”, “us”, or “our”) operates Pilotflow by Zippy, a closed-source Google Workspace add-on that helps you manage your Gmail inbox by applying smart Action Packs — automated rules that organise, label, forward, and clean up your emails automatically.

This Privacy Policy explains how we collect, use, and protect your information when you use Pilotflow by Zippy.

2. Information We Collect

Pilotflow by Zippy requests the following OAuth scopes to function:

Scope	Purpose
`gmail.modify`	Apply labels, archive, and modify emails per your Action Packs
`gmail.labels`	Create and manage Gmail labels used by your Action Packs
`gmail.send`	Forward emails to addresses you configure
`drive.file`	Create a Google Spreadsheet processing log in your Drive
`spreadsheets`	Write email processing data to your Sheets log
`script.projects`	Required for Google Apps Script deployment
`script.scriptapp`	Create time-based triggers for scheduled processing

Data accessed during processing:

Email metadata: sender, subject, labels, thread ID
Your configured Action Pack rules (stored in Google Apps Script PropertiesService)
Your Gmail label list
A Google Spreadsheet for processing logs (created in your Drive, owned by you)

3. How We Use Your Information

All data access is solely to provide Pilotflow by Zippy’s functionality:

Apply your configured Action Pack rules to incoming emails
Store your Action Pack configurations and preferences
Maintain a processing log in your personal Google Spreadsheet
Improve the add-on’s features and reliability

We do not use your data for advertising, profiling, or any purpose beyond delivering the service you explicitly configured.

4. Data Storage and Security

Pilotflow by Zippy is a closed-source, professionally maintained application. All data processing occurs inside Google’s own infrastructure:

No external servers — we operate no database that stores your emails
No third-party data sharing — your data stays within Google’s systems
No advertising use — we do not sell or share your data
Google enforces the boundaries — OAuth 2.0 limits access to exactly the scopes you authorise; we cannot exceed these limits

Your Action Pack configurations are stored in Google Apps Script’s PropertiesService (scoped to your account). Your processing log lives in a Google Spreadsheet in your own Google Drive.

5. Subscription Data

If you subscribe to a paid plan, payment is processed by Stripe. Bright Softwares receives only:

Your subscription status and plan tier
Your billing email (for receipts)

We do not store credit card numbers. Stripe’s privacy policy governs payment data: stripe.com/privacy.

6. Data Retention

Your data is retained only as long as Pilotflow by Zippy is installed in your Google account. Uninstalling the add-on deletes all stored preferences and Action Pack configurations. Your processing log spreadsheet (if created) remains in your Google Drive under your full control.