Back

Privacy

Oppora is a personal portfolio project, currently in Google's testing phase: only invited Google accounts can connect Gmail. This page explains exactly what happens to your data.

Your emails are processed by Google's Gemini (free tier)

To find opportunities, Oppora sends emails that look relevant to Google's Gemini AI through its free tier. For each of those emails it sends only:

  • the subject, the sender's display name and email domain (not the address), and the date;
  • the email's text, cleaned up (quoted replies and signatures removed) and cut to 4,000 characters.

Personal details are removed first: email addresses, phone numbers, OTPs and verification codes, the secret parts of sign-in, reset and verification links, and your name are replaced with placeholders before anything is sent.

Attachments are never read or sent. Promotions, chats, your own sent mail and emails without opportunity-related words are filtered out first and never sent to the AI.

What the free tier means: under Google's Gemini API terms, Google may use content sent to its free services to improve its products, and human reviewers may read it. Google asks users not to send sensitive, confidential or personal information to the free tier. Only connect a mailbox you're comfortable with this for, or use the demo instead.

You choose. After you sign in, Oppora asks before it scans anything. Choose Use without AI and it reads your emails with simple rules on its own server: nothing is sent to an AI (it's less thorough). You can switch anytime in Settings → Privacy.

What Oppora reads and keeps

  • Read-only Gmail access (gmail.readonly) plus your basic profile and email address. Oppora can't send, change or delete email, and never sees your Google password.
  • For relevant emails it stores the message ID, sender, subject, date, a short snippet and the opportunity details it extracts. Full email bodies are never stored.
  • Google sign-in tokens are encrypted and never sent to your browser.

Where it's stored

The website runs on Vercel, the API on Render, the database on Neon (Postgres) and rate-limit counters on Upstash (Redis; no email content). All of them are used on their free plans.

Your controls

  • Disconnect Gmail (Settings → Gmail) revokes Oppora's access at Google and deletes the stored tokens.
  • Delete my data (Settings → Account) deletes your opportunities, emails and notifications and disconnects Gmail.
  • You can also remove Oppora at Google Account → Third-party connections.

The demo

“Try the demo” opens a shared, read-only account filled with made-up sample emails. Nothing you do there is saved, and no real person's email is involved.

Questions? See Contact.