Privacy Policy

This is the privacy policy for Gaggle Mail (gaggle.email), a group email service operated by Seven Forty Six Ltd, a company registered in England and Wales (company number 11386383). It explains what information Gaggle Mail collects, how we access, use, store, share and protect it, how long we keep it, and how you can have it deleted.

Last updated: 18 September 2026.

Who this policy covers

Account holders. If you create a Gaggle Mail account, as a group administrator or as a member, Seven Forty Six Ltd is the data controller for your account and billing information.
Group members. If a group administrator adds your name and email address to a group, we process that information on the administrator's behalf, as a data processor. That processing is governed by our Data Processing Agreement, and the administrator of your group is the data controller.

Information we collect

Account information. Your name, email address and password. Passwords are salted and hashed, and we never see them in plain text. If you sign in with Google, Apple, Microsoft or your organisation's single sign-on, we receive basic profile information from that provider instead of a password.
Group data. Member names and email addresses, group membership and roles, messages and attachments sent through a group, and delivery, bounce and unsubscribe records.
Billing information. Billing contact details and subscription records. Card payments are handled by Stripe. We never see or store full card numbers.
Technical information. Log data such as IP address, browser and device details, and actions taken in your account. We use this for security, abuse prevention and troubleshooting.
Support correspondence. Messages you send to our support team.

Google user data

Gaggle Mail offers "Sign in with Google" as an optional way to create an account and log in. This section explains how Gaggle Mail accesses, uses, stores, shares and protects Google user data.

What Google user data we access

When you choose Sign in with Google, Gaggle Mail requests Google's standard sign-in permissions only (openid, email and profile). This gives us your name, your email address, your profile picture and the unique identifier Google assigns to your account.

We do not request access to anything else. Gaggle Mail cannot read your Gmail messages, contacts, calendar, Google Drive files or any other data in your Google account, and we never see your Google password.

How we use Google user data

We use this information only to provide Gaggle Mail's user-facing features: to create your Gaggle Mail account, to sign you in securely, to identify you within the groups you belong to, and to send you emails about your account and your groups.

We do not use Google user data for advertising of any kind, including targeted, personalised, retargeted or interest-based advertising. We do not sell it, provide it to data brokers or information resellers, use it to determine credit-worthiness or for lending purposes, or use it to build databases for other purposes. We do not use Google user data to develop, improve or train AI or machine learning models.

How we store and protect Google user data

Your name, email address and Google account identifier are stored with your Gaggle Mail account record on Google Cloud Platform in the United States. Data is encrypted in transit using HTTPS and encrypted at rest. Access to production systems is restricted to named staff on a least-privilege basis, with multi-factor authentication required. See "How we protect information" below for more detail.

Who we share Google user data with

We do not sell, transfer or disclose Google user data to third parties, except:

to the service providers that host and operate Gaggle Mail on our behalf, listed in Annex 3 of our Data Processing Agreement, who may only use it to provide their service to us;
to the administrators of groups you belong to, who can see your name and email address as a member of their group;
where we are legally required to disclose it.

Retention and deletion of Google user data

We keep Google user data for as long as your Gaggle Mail account is open. When you delete your account, or ask us to delete it by emailing help@gaggle.email, we delete it as described under "How long we keep information" below.

You can remove Gaggle Mail's access to your Google account at any time from your Google Account settings. Removing access stops Google sign-in but does not delete your Gaggle Mail account, so please also email us if you want your account deleted.

Limited use

Gaggle Mail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How we use information

To provide the service. Receiving, filtering and delivering group email, maintaining message archives, and managing group memberships.
To run your account. Authentication, billing, customer support and important service announcements.
To keep the service secure. Detecting spam and abuse, monitoring for errors, and troubleshooting delivery problems.
To improve Gaggle Mail. Understanding in aggregate how the service is used.
To meet our legal obligations. For example, keeping tax and accounting records.

We do not sell your personal information. We do not show advertising inside Gaggle Mail, and we do not use the content of your groups or messages for advertising or profiling.

Who we share information with

Service providers. We use a small number of providers for hosting, email delivery, search, payments, sales tax and customer support. They process data only on our instructions. The current list, with locations, is in Annex 3 of our Data Processing Agreement.
Other members of your groups. Messages you send to a group are delivered to its members. Your name and email address are visible to the group's administrators and, depending on the group's settings, to other members.
Legal requirements. We may disclose information to law enforcement or regulators where we reasonably believe we are legally required to.
Business transfer. If Gaggle Mail is sold or merged, information may transfer to the new owner, who must continue to honour this policy.

We do not share personal information with anyone else.

How we protect information

All data is encrypted in transit over HTTPS, email delivery uses TLS wherever the receiving mail server supports it, and data at rest is encrypted.
Passwords are salted and hashed, and two-factor authentication and single sign-on are available.
Access to production systems is restricted to named staff on a least-privilege basis, with multi-factor authentication on every administrative account. Support agents have no access to production infrastructure.
Gaggle Mail runs on Google Cloud Platform and Amazon Web Services in the United States, and holds a SOC 2 Type 1 report issued by an independent auditor.
Our infrastructure is scanned nightly for vulnerabilities, and we run error and uptime monitoring with alerting.

Full details are in our Information Security overview.

How long we keep information

We keep account information for as long as your account is open.
We keep group data until the group's administrator deletes it, or deletes the group. Administrators can delete members, messages and whole groups at any time from within Gaggle Mail.
When an account is closed or a group is deleted, we delete the associated personal data within 90 days. Copies held in backups are removed in the ordinary backup rotation within a further 30 days.
Billing records are kept for as long as tax and accounting law requires, normally six years.

How to delete your data

Members: you can leave a group at any time using the unsubscribe link at the bottom of every group message.
Administrators: you can remove members, delete messages and delete groups from within Gaggle Mail.
Anyone: to delete your Gaggle Mail account and the personal information we hold about you, including any information received from Google, email help@gaggle.email from the address on your account. We will confirm once it is done.

Your rights

You have the right to ask for a copy of your personal data, to have it corrected or deleted, to object to or restrict how we use it, and to receive it in a portable format. To use any of these rights, email help@gaggle.email. If you are a member of a group and your request is about that group's data, we will pass it to the group's administrator, who is the data controller.

If you are unhappy with how we have handled your data, you can complain to the UK Information Commissioner's Office at ico.org.uk, or to your local data protection authority.

Cookies and analytics

We use cookies that are necessary to keep you signed in. Our website uses privacy-friendly analytics (Plausible and Ahrefs Web Analytics) that do not use cookies or track you across other sites. We also measure when one of our own adverts on Google Ads or Microsoft Advertising leads to a sign-up. Information received from Google sign-in is never used for advertising.

International transfers

Seven Forty Six Ltd is based in the United Kingdom and Gaggle Mail is hosted in the United States. Where personal data is transferred outside the UK or EEA, we rely on the safeguards set out in section 7 of our Data Processing Agreement.

Changes to this policy

We will update this page, and the date at the top, whenever this policy changes. If we change how Gaggle Mail uses Google user data, or make any other material change, we will notify account holders by email before the change takes effect.

Contact

Seven Forty Six Ltd, trading as Gaggle Mail
Longfrey Cottage, Dorking Road, Chilworth, Guildford, Surrey, GU4 8RH, United Kingdom
Email: help@gaggle.email