Privacy Policy
Last updated: October 2026
Our Commitment
- We will never share, rent, or sell your personal data.
- We do not store the content of your emails or any email-related information beyond what is needed to deliver our service.
- We only collect data necessary to operate Quicktion, maintain your account, and communicate with you.
- AI Processing is off by default. We only send email content to a model provider when you explicitly enable AI on a destination.
Information We Collect
Personal Information
We collect your email address through Google or Microsoft sign-in, or directly within our app, to identify your account.
Account Information
We collect account details such as your plan, subscription history, and renewal status to manage the services you have access to.
Log & Activity Data
We collect application logs and activity data (e.g. actions performed, execution times) to investigate issues, monitor service health, and improve performance.
Email Forwarding Data
When you use our email forwarding service, we temporarily store forwarded email content in Google Cloud Storage to process it into the destination you chose (a Notion database, Google spreadsheet, Airtable table, Linear team, Trello board or Google Drive folder). Once processing is complete, raw email content is kept only for retries and troubleshooting, and deleted 30 days after processing. Before you connect your first tool, emails forwarded to your personal Quicktion address are held for up to 3 days (at most 5 emails) so they can be saved once a destination exists, then deleted.
AI Processing Data
If you enable AI Processing on a destination, the email content being saved is sent to Google Cloud Vertex AI (Gemini) so the model can summarize the body or extract structured fields per your configuration. AI Processing is optional and off by default — you turn it on per destination by writing a prompt or selecting properties to extract. We do not send email content to any model provider unless AI Processing is configured for that destination.
How We Use Your Information
To Provide Our Services
We use your personal information to identify you, authenticate your account, and deliver the features you use.
To Support Our Services
We use activity and log data to investigate and resolve issues, monitor for outages or errors, and take corrective action.
To Communicate with You
We may contact you about new features, service updates, or respond to support requests using the contact information you provide.
Google OAuth Scopes
When you connect Google Sheets or Google Drive from the Quicktion dashboard, we request these Google OAuth scopes:
- spreadsheets — adding rows to the spreadsheet you picked as a destination.
- drive.file — creating files and folders that Quicktion itself makes: attachments linked from your spreadsheet rows and the PDFs saved to a Google Drive destination. This scope does not let us see files you created yourself.
Our Gmail add-on requests the following Google OAuth scopes:
- gmail.addons.execute — running as a Gmail add-on.
- gmail.addons.current.message.readonly, gmail.addons.current.message.metadata, gmail.addons.current.message.action — reading information and content from your email while the add-on is open.
- userinfo.email, userinfo.profile — identifying your account.
- script.external_request — connecting with the Quicktion API, which saves the email to the destination you chose.
- script.locale — applying proper formatting to data.
Access to Your Tools
When you connect Notion, you choose which databases to share with Quicktion and we only access those. When you connect Airtable, Linear or Trello, we access the bases, teams or boards you pick as destinations through the permissions their consent screens list. Access tokens for every provider (Notion, Google, Airtable, Linear and Trello) are encrypted at rest using AES encryption, and are only used to save emails to the destinations you configured.
AI Processing
Quicktion offers an optional AI Processing feature that can summarize email bodies and extract structured data into your destination properties before saving. AI Processing is off by default. You enable it per destination by writing a body prompt or selecting which properties the AI should fill.
How it works
When AI Processing is enabled for a destination and an email is saved to it, Quicktion sends the email content (subject, body, and sender) along with your prompt to Google Cloud Vertex AI, which runs the Gemini model on Google's infrastructure. The model returns the transformed body and any extracted field values, which we then save to your destination using the existing flow.
What is sent to the model
Only the content of the email being saved (subject, body text, sender) and the AI prompt you configured. We do not send your account information, integration tokens, or other emails. We truncate long emails before sending to limit cost and exposure.
If you turn on Read attachments for a destination, PDF and image attachments on the email being saved are also forwarded to Vertex AI alongside the body so the model can read them. Attachments are subject to the same handling policy as email body content: not retained by Vertex AI and not used to train foundation models. Other file types (DOCX, XLSX, ZIP, etc.) are not forwarded. The toggle is off by default and can be turned off at any time.
Vertex AI data handling
Google Cloud Vertex AI processes requests to generate model responses and does not retain your prompts or responses for training its foundation models. Data is processed in transit and not stored beyond the request lifecycle by default. For full details, see Google Cloud's Generative AI Data Governance.
Your control
You can turn AI Processing off at any time by clearing the AI fields on a destination's settings page or by deleting the destination. Disabling the feature stops Quicktion from sending future emails on that destination to Vertex AI. AI Processing is available on paid plans only.
Using Quicktion from ChatGPT and other AI assistants
You can connect Quicktion to an AI assistant such as ChatGPT or Claude and ask it to save an email into one of your destinations. The assistant talks to Quicktion through a server we run at quicktion.io/mcp, using an OAuth connection you approve on a Quicktion page while signed in. We never see your password for the assistant, and the assistant never sees your Quicktion password.
What the assistant sends us
Only the email you ask it to save: subject, sender, recipients, date and body, plus which destination to save it to. We do not receive your conversation with the assistant, and we do not ask for it. The email is then saved exactly as if you had forwarded it, so everything above about email forwarding data and AI Processing applies to it too.
What we send back
The names of your destinations and their forwarding addresses, the subject and sender of your recent saves, and links to the records that were created. Nothing else about your account.
Your control
Each connected app is listed under Settings → Connected apps, where you can disconnect it at any time. Disconnecting stops new saves immediately; it does not remove emails that were already saved to your destinations. Deleting your account removes every connection.
Subprocessors
Quicktion uses the following third-party services to deliver our product. Each receives only the data necessary for its purpose.
- Google Cloud Platform — hosting, storage, and authentication (Firebase, Cloud Functions, Cloud Storage, Firestore).
- Google Cloud Vertex AI (Gemini) — AI Processing, when enabled per destination. Receives email content and your AI prompt only when AI Processing is configured. Does not retain prompts or responses for training.
- Resend — inbound email delivery for the forwarding flow and outbound transactional email (account notifications, lifecycle emails).
- Paddle — billing and subscription management.
- Mixpanel — anonymized product analytics.
- Notion, Google Sheets, Airtable, Linear, Trello, Google Drive — destinations you connect to receive saved emails. Data is sent only to the destinations you explicitly configure.
Google API Services Disclosure
Quicktion's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data Retention
Account & Personal Data
We retain your account information (email address, profile details, subscription history) for as long as your account is active. If you delete your account, we delete all associated personal data within 30 days.
Email Forwarding Data
Forwarded email content stored in Google Cloud Storage is deleted 30 days after processing. Email log entries (subject line, sender, timestamp, and processing status) are kept while your account is active, so your activity feed keeps its history, and deleted with your account.
OAuth Tokens
Notion, Google, Airtable, Linear and Trello OAuth tokens are stored encrypted and are deleted immediately when you disconnect an integration or delete your account.
Connected Apps
When you connect an AI assistant such as ChatGPT, we keep a record of that connection (which app, which permissions, when you approved it) for as long as it stays connected. Disconnecting it in Settings or deleting your account ends the connection; the assistant's access expires within an hour at most.
AI Processing Data
Email content sent to Google Cloud Vertex AI for AI Processing is processed in transit and is not retained by Vertex AI beyond the request lifecycle. Quicktion does not store the model's raw responses; we only persist the final transformed body and extracted field values that are saved to your destination.
Log & Analytics Data
Application logs used for debugging and performance monitoring are retained for up to 90 days and then automatically purged. Emails we send you (welcome, setup tips, usage notices) carry open and click tracking so we can tell whether they help; you can opt out of the tips with the unsubscribe link in each one.
Data Deletion
You can manage and delete your data at any time:
- Delete your account — contact us at support@quicktion.io to request full account deletion. We will delete all your personal data, integrations, destinations, email logs, and stored tokens within 30 days.
- Disconnect an integration (Notion, Google, Airtable, Linear or Trello) — remove it from your dashboard. The associated OAuth token is deleted immediately.
- Delete a destination — remove it from your dashboard. The forwarding address is deactivated and associated configuration is deleted immediately.
- Revoke Google permissions — visit your Google Account permissions page to revoke Quicktion's access at any time.
When you request data deletion, we remove your data from our active systems within 30 days. Backups that may contain residual data are purged within 90 days.
Data Security
We rely on Google Cloud Platform for infrastructure security. Access tokens are encrypted before storage. We do not sell or rent your personal information and we do not store the contents of the databases, spreadsheets, boards or folders you connect.
We use third-party analytics services to monitor and improve our product. Your emails and connected data are never shared with other Quicktion users.
Changes to This Policy
We may update this Privacy Policy from time to time. Continued use of Quicktion after changes are posted constitutes your acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy, please contact us at support@quicktion.io.