Privacy & data practices
What Batohi collects, what it is used for, how long it is kept, and what it is never used for.
Draft under legal review. These terms are not in force and do not yet bind anyone.
Batohi is a Gmail and Outlook engagement tool: it tells you when messages you send get opened, which links get clicked, and whether you were answered. This page explains exactly what data that requires, what it is used for, and what it is never used for.
What Batohi collects
- Account basics on sign-in — your email address and name, from your Google or Microsoft account.
- Metadata about messages you choose to track — the subject line, recipient addresses, and sent time.
- Engagement events — opens and clicks, including the IP address, user-agent and coarse location (city and country, derived from the network request; Batohi uses no separate location vendor) of each fetch. This is used solely to classify a genuine open apart from a proxy prefetch or a self-open, not to build a profile of you or anyone you email.
- Reply facts — that a reply arrived, when, which of your messages it answered, and whether it reads as written by a person or generated automatically.
Message text
Batohi stores a bounded, encrypted excerpt of two kinds of text, and no others: the new words of a reply you received (quoted history removed by your mail provider before we see it), and the body of a message composed inside Batohi. Both are capped in length, encrypted before the database sees them, and used only to show you what was said and to answer your own questions about your conversations.
Mail you send from Gmail through the Batohi extension never has its body read or stored — the extension does not carry it. Text capture is on by default and can be switched off for your account on request, after which Batohi keeps headers and engagement facts only.
What the extension does
The Batohi Chrome extension reads the Gmail page itself (the DOM) to add tracking to messages you send — it uses no Gmail API scopesand never asks Google for access to your mailbox. The only data it sends anywhere goes to Batohi's own service.
For Outlook, Batohi uses the Microsoft Graph permissions you grant at sign-in, and only those, to send tracked mail and to see replies to it. If you connect a mailbox to Batohi, the credentials for it are encrypted at rest.
Deliverability seed inboxes
If you use the placement feature, you give Batohi an app password for a secondary inbox youown. Batohi stores that password encrypted, reads only that inbox, and records only where your own test message landed — inbox, promotions or spam. It is never used to read anyone else's mail.
Purpose limitation
Your data is used only to provide Batohi's features to the account that created it. It is never sold, never shared with third parties for their own purposes, never used for advertising, and never repurposed for unrelated features.
Limited Use
Batohi's use of information received from Google APIs, and of data the Batohi Chrome extension reads from Gmail, adheres to the Chrome Web Store User Data Policy, including its Limited Use requirements. That data is used only to provide and improve the tracking features you asked for; it is not transferred to anyone except as needed to provide those features, to comply with the law, or for security; it is never used for advertising of any kind; and no human reads it except with your explicit permission, to resolve a problem you reported, or where the law requires it.
AI summaries
Batohi can put its conclusions into words and answer questions about your conversations. When you use that, the question and the relevant tracked data are sent to our AI provider, listed on the subprocessorspage, which processes it on our instruction to return the answer. The numbers, states and recommendations themselves are computed by Batohi's own rules, not by the model.
Retention
Network and raw evidence data are retained for 90 days. That means IP addresses and user-agents recorded on engagement events, and — for a connected mailbox — the raw sender address and message headers we read to work out what happened. After 90 days those raw values are erased.
Derived conversation intelligencemay be retained for up to 12 months after a conversation's last activity, so you can review your conversation history and outcomes. This is the conclusion without the raw material: whether a message was a reply, whether it was written by a person or generated automatically, which of your emails it answered, how long it took, and which rules produced that answer.
Stored message text is retained for as long as the conversation it belongs to, and is deleted with it.
Deleting your data
You can delete data from a connected mailbox at any time from your account settings — that removes the stored credentials and everything we derived from that mailbox. Your account and all associated data are deleted on request; we act on a deletion request within 30 days.
Who is responsible for what
You are the controller of the recipient data you bring to Batohi; Batohi processes it on your instruction. You are responsible for obtaining any consent your jurisdiction requires, and for using Batohi in a way that complies with the law that applies to you and respects your recipients' stated preferences.
Payment
Card details are handled by our payment processor and are never seen or stored by Batohi. See subprocessors.
Security
Data is encrypted in transit; mailbox credentials, app passwords and stored message text are encrypted before the database sees them, and Batohi refuses to store them at all rather than fall back to plaintext. Access to production data is restricted to the operator.
No system is perfectly secure and Batohi is not warranted to be. If you find a vulnerability, report it to the contact below before disclosing it anywhere else.
Changes
We may update this policy. If a change materially affects what is collected or how it is used, we will say so on this page before it takes effect.
Contact
Questions about this policy, or a deletion request? Email buddhubodhi@gmail.com (interim address; this will move to a batohi.com address).
Mail sent to a batohi.com address is stored so it can be read and answered. Only messages from addresses Batohi has explicitly listed are opened by an automated assistant; for anyone else, Batohi keeps who wrote, when, and the subject line, and does not retrieve the body.
Supersedes the policy effective 2026-07-17