Privacy Policy

Effective November 11, 2026

Backburners (backburners.ai) is operated by Knudsen Services, LLC, Kirkwood, Missouri, USA ("we", "us"). This policy explains what information we collect when you use Backburners, how we use it, and the choices you have. Questions: support@backburners.ai.

What the service does

Backburners measures inbox placement. When you connect a mailbox, we send test emails from it on a schedule to seed inboxes that we own, then record whether each test landed in the inbox, spam, another folder, or did not arrive. Test emails are never sent to your contacts or to anyone other than our seed inboxes.

Information we collect

Account information: your email address, an optional name, and your password, which is handled by our authentication provider and stored only as a hash.
Connected mailbox information: the email address of each mailbox you connect, the provider (Google or Microsoft), and the access and refresh tokens the provider issues to us.
Test results: when each test was sent, which seed inbox received it, and where it landed.
Cookies: strictly necessary cookies to keep you signed in, protect the mailbox connection step, and remember your time zone for the dashboard. We do not use advertising or analytics cookies.

Google user data

When you connect a Gmail or Google Workspace mailbox, we request these permissions:

openid and email: to learn which Google account you connected, so we can show it on your dashboard.
https://www.googleapis.com/auth/gmail.send: to send test emails from your address to our seed inboxes, on the schedule shown in the service.

We do not request permission to read, search, modify or delete your email, and we cannot do so. The only messages we send are the test emails described above. We store your Google tokens encrypted (AES-256-GCM) and use them only to send those test emails.

Backburners's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

We use Google user data only to provide the inbox placement testing you see in the service.
We do not sell Google user data, or use or transfer it for advertising, including retargeting or personalized ads.
We do not use Google user data to determine credit-worthiness or for lending purposes.
We do not use Google user data to develop, improve or train generalized artificial intelligence or machine learning models.
No person at Knudsen Services, LLC reads your Google data, except with your explicit permission for support, when necessary for security or to comply with law, or when aggregated and anonymized for internal operations.

Microsoft user data

When you connect an Outlook or Microsoft 365 mailbox, we request Mail.Send to send test emails from your address to our seed inboxes, User.Read and email to identify the connected account, and offline_access so tests can run on schedule while you are away. We do not read your mailbox. These tokens are stored encrypted and used only to send test emails.

How we use information

To run the scheduled tests and show your results.
To sign you in, secure your account, and respond to your support requests.
To send you service messages, such as account confirmation or password reset emails.

We do not sell personal information, and we do not use it for advertising.

Service providers

We use these providers to run Backburners. They process data only on our behalf:

Supabase: database and authentication.
Vercel: website and application hosting.
Google and Microsoft: to send the test emails you authorize, through their APIs.

We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a merger or sale of the business, in which case this policy continues to apply.

Security

Mailbox tokens are encrypted at rest with a key that is kept separately from the database. Data is sent over encrypted connections (HTTPS). Database access is restricted so customers can see only their own mailboxes and results. No system is perfectly secure, but we work to protect your information.

Retention and deletion

Disconnecting a mailbox from your dashboard immediately deletes its stored tokens and its test history, and revokes our access at Google. You can also remove our access yourself at any time from your Google Account or Microsoft account.
We keep account information and test results while your account is open.
To delete your account and all associated data, email support@backburners.ai from your account's address. We complete deletion within 30 days, except where we must keep records to comply with law.

Your rights

You can ask to access, correct, export or delete your personal information by emailing support@backburners.ai. Depending on where you live, you may have additional rights under local law, and we will honor them as required.

Children

Backburners is a business tool and is not directed to children under 16. We do not knowingly collect their information.

Changes

If we change this policy, we will update the effective date above, and for significant changes we will notify you by email or in the service before they take effect.

Contact

Knudsen Services, LLC
Kirkwood, Missouri, USA
support@backburners.ai