Privacy Policy

Service: Nextcloud Mail Relay
Last updated: November 6, 2026

Purpose

Nextcloud Mail Relay is a privately operated service used by one Nextcloud installation to send outgoing email through a Gmail account. It is not a public email service and does not offer access to a Gmail inbox.

Google user data accessed

When the account owner authorizes the service, it uses Google's OAuth 2.0 authorization for Gmail SMTP sending. The Gmail permission requested is used to authenticate with Gmail and submit outgoing messages. The service does not use this permission to read, search, or manage the account's inbox.

How data is used

Nextcloud supplies the recipient, subject, message body, and any message attachments for an outgoing email. The relay processes this information only to submit the message to Gmail for delivery. Google processes the message under Google's own terms and privacy policy.

Storage and sharing

The relay stores OAuth authorization information, including tokens needed to maintain the connection, on the server that operates the relay. These files are kept in a restricted server directory accessible to the relay service account. The relay is configured to pass outgoing email to Gmail; it is not intended to retain message contents as a mailbox or archive.

Data is shared with Google as necessary to authenticate and deliver outgoing email, and with the intended email recipients as part of delivery. The service operator does not sell Google user data or use it for advertising. The service does not otherwise disclose Google user data to third parties except where required by law or necessary to operate the service.

Security and retention

OAuth tokens are sensitive credentials and are stored with restricted file permissions on the relay server. Tokens are retained while the email relay is in use and should be revoked and deleted when the connection is no longer needed. Email content may remain in Nextcloud logs, the recipient's mailbox, or Google's systems according to their respective retention practices; the relay itself is not designed as long-term message storage.

Your choices

The account owner can stop using the relay and revoke its access through their Google Account security settings. Revoking authorization prevents the relay from continuing to send through that account until authorization is granted again.

Children

This privately operated service is not directed to children and is not intended for use by children.

Changes to this policy

This policy may be updated if the service's operation or data practices change. The current version will be published on this page.

Contact

For privacy questions, contact zunqira.nextcloud@gmail.com.