Last updated: 2026-09-17
LATYNEX Outreach Delivery sends and tracks cold-outreach emails on behalf of LATYNEX, using Gmail mailboxes that their owners have explicitly connected to this system via Google OAuth.
We request two Gmail API scopes: https://www.googleapis.com/auth/gmail.send (to send outreach emails from the connected mailbox) and https://www.googleapis.com/auth/gmail.readonly (to detect delivery failures — bounces — and to confirm whether a send that timed out actually went through, by reading message metadata in the connected mailbox's own Sent and Inbox folders). We never request gmail.modify and never delete, label, move, or alter existing mail in the connected mailbox.
We read message headers (From, Subject, Message-ID, In-Reply-To, References, Date), a plain-text body copy (used only to detect bounce/delivery-failure messages and genuine replies), and attachment metadata (filename, type, size — never attachment content). We do not read messages unrelated to mail sent through this system beyond what is necessary to run the bounce/reconciliation checks described above.
OAuth credentials (client ID, client secret, refresh token) are stored encrypted at rest (PostgreSQL pgcrypto, application-level master key) in a private database, never in plaintext, application logs, or version control.
Access granted through Google OAuth is used solely to operate outreach-sending, delivery-failure detection, and reply-handling for the mailbox owner who granted it — never sold, shared with third parties, or used for advertising. This use complies with the Google API Services User Data Policy, including the Limited Use requirements.
A mailbox owner may revoke this app's access at any time via Google Account → Security → Third-party access. On request to info@latynextrade.com, we will delete the stored credential and associated send/read history for that mailbox.