[ MHRUBY OUTREACH ]
Mhruby Outreach
An internal application of Leadora Technologies s.r.o. for preparing and sending business emails to online shops. It works only with the operator’s own Gmail account and does not access anyone else’s mailbox.
Updated 5 October 2026
01
What Mhruby Outreach does
Mhruby Outreach is a personal work tool of Maxmilián Hrubý. It finds online shops, measures specific problems on their websites (for example a long checkout or missing delivery information), prepares a short audit and an email linking to it. The operator manually approves every email before it is sent.
The application connects to Gmail through the official Gmail API and OAuth. It never handles the mailbox password. Only the owner of [email protected] grants access, and can revoke it at any time.
02
Which Google user data the application accesses and why
The application requests three permissions. Each has a single purpose directly tied to sending and monitoring business correspondence.
| Gmail API scope | Why it is needed | What the application does |
|---|---|---|
gmail.send | To send an approved email from the operator’s account. | Sends a single message the operator approved beforehand. The message appears in the Sent folder. |
gmail.readonly | To detect whether a recipient replied, a message bounced, or someone asked us to stop contacting them. | Reads sender, subject and text only for messages from contacted addresses, delivery failures, threads the application itself started, and messages containing an explicit request to stop contact (e.g. “STOP”, “unsubscribe”). It changes and deletes nothing. |
gmail.compose | To create a draft and a test message to the operator’s own address. | Creates a draft before a live send. It does not read or edit existing drafts. |
03
What the application does not do with Gmail data
- It does not sell, rent or transfer Gmail data to anyone.
- It does not use it for advertising or profiling and does not pass it to data brokers.
- It does not send message content to any AI model, does not use it to train models, and does not use it for search or to improve third-party services.
- No human reads the messages except the mailbox owner, apart from legally required cases or a security incident.
- It does not delete mail and does not change labels.
04
Where the data is stored
The application runs on the operator’s work laptop. The Gmail sign-in token is encrypted with Windows DPAPI and can be read only under the Windows account that stored it. From incoming messages the application keeps only what it needs: the Gmail message ID, the sender address (only if the sender asked us to stop, so we do not write to them again), the time of the reply and the resulting label “replied / bounced / do not contact”. The message text itself is neither stored nor transferred to the cloud.
05
Limited Use disclosure
Mhruby Outreach’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
06
Revoking access and deletion
You can revoke access at any time on the Google Account third-party access page (myaccount.google.com/permissions) or by writing to the address below. After revocation the application loses access to Gmail and the stored token is deleted on request.
07
Operator and contact
Leadora Technologies s.r.o., company ID 24624136, Hostěradice 44, 252 82 Kamenný Přívoz, Česká republika. The application is developed and operated by Maxmilián Hrubý. Contact: [email protected], +420 736 533 338. Details on personal data processing are in the privacy policy.
Privacy policy
The full policy, including data subject rights and handling of Google user data.
Open the policy