Privacy Policy
Last updated: April 11, 2026
MessagePilot ("we", "our", or "the app") is a bulk email and SMS automation application. We are committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.
1. Information We Collect
Account Information: When you sign in with Google, we receive your name, email address, and profile photo from Google Sign-In. This is used solely for authentication and displaying your profile within the app.
Contact Data: You may import contacts (names, email addresses, phone numbers) from Excel/CSV files or enter them manually. This data is stored locally on your device using encrypted local storage (Hive) and is never uploaded to our servers.
SMTP Credentials: If you configure Gmail SMTP for email sending, your email address and app password are stored locally on your device only. We never transmit or store your SMTP credentials on any server.
Subscription Data: When you purchase a subscription, we store your plan status, purchase date, and expiry date in Firebase Firestore, linked to your authenticated account. Payment processing is handled entirely by Razorpay — we do not store your card numbers, UPI IDs, or banking details.
Usage Analytics: We use Firebase for basic crash reporting and app stability monitoring. We do not track your browsing behavior, message content, or contact details on any server.
2. How We Use Your Information
- To authenticate you and manage your account
- To process and verify your subscription payments
- To send emails and SMS on your behalf, as you direct
- To improve app stability through crash reports
3. Data Storage & Security
Contact data, SMTP credentials, and message templates are stored locally on your device and are not transmitted to our servers. Account and subscription data is stored in Firebase Firestore with Google Cloud's security infrastructure. All network communication uses HTTPS/TLS encryption.
4. Third-Party Services
The app uses the following third-party services, each with their own privacy policies:
- Firebase (Google) — Authentication, Firestore database, crash reporting
- Google Sign-In — Account authentication
- Razorpay — Payment processing
- Gmail SMTP — Email delivery (using your own credentials)
5. SMS Permissions
The app requests SMS permission to send bulk SMS messages on your behalf. SMS messages are sent directly from your device using your SIM card. We do not intercept, read, or store the content of your SMS messages on any server. The SMS permission is used solely for the purpose of sending messages that you compose and initiate.
6. Data Sharing
We do not sell, trade, or share your personal data with third parties for marketing purposes. Data is shared only with the third-party services listed above, strictly for the purposes described in this policy.
7. Data Retention & Deletion
Local data (contacts, SMTP config, templates) can be deleted at any time by clearing app data or uninstalling the app. To delete your account and associated cloud data (subscription records), contact us at the email below and we will process your request within 30 days.
8. Children's Privacy
MessagePilot is not intended for use by children under 13. We do not knowingly collect personal information from children.
9. Changes to This Policy
We may update this privacy policy from time to time. Changes will be posted on this page with an updated date. Continued use of the app after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this privacy policy or your data, contact us at:
Email: support@messagepilot.app