What we read, what we keep, what we never do
Has It Arrived works by reading order and delivery emails in mailboxes you connect. That's a serious thing to be trusted with. Here is exactly how it works, in plain English.
What we read
- Only mailboxes you explicitly connect, with read-only access. We cannot send, change, or delete your email.
- We search only for delivery-ish email: purchase categories, known shops and couriers, and delivery-related subjects, over the last 90 days.
- For each matching email we read the sender, subject, date, and the short preview snippet (the ~200 characters your inbox shows). We do not fetch full email bodies.
What we keep
- The structured facts: shop name, order reference, tracking number, amount, and our classification of the email — plus the sender/subject/date so you can always see why an order exists ("why is this here?" on any order).
- Mailbox access tokens, stored server-side where your browser (and other users) can never reach them.
- A log of consequential actions on your account (mailbox connected, scans run, exports, deletion), so there is always an audit trail.
What we never do
- Never store full email bodies.
- Never sell, share, or broker your data. Your purchase history is not the product — the subscription is.
- Never use your data for advertising.
Who helps us run this
Your data touches exactly four processors: Google (the mailbox you connected), Supabase (our database, hosted in London), Vercel (serves the website), and Anthropic (when an email is ambiguous, its sender, subject and preview — never the body — are sent to the Claude model to classify; not used for AI training). That's the whole list.
Your controls
- Export — download everything we hold about you as a file, any time, from Mailboxes → Your data.
- Delete everything — one button, same place. It removes your account, mailbox connections, tokens, orders, and history immediately, and we verify the deletion rather than assume it.
- Disconnect — revoke our access any time from your Google account permissions as well.
Questions: privacy@hasitarrived.com