Privacy policy
Golgi is an email client for commercial real estate professionals. To do its job it connects to your existing mailbox and reads your email. This policy explains exactly what we access, what we do with it, where it lives, and how you get rid of it.
The short version. We read your email so we can show it to you and identify the properties being marketed in it. We do not sell it, we do not use it to train machine learning models, we do not share it with advertisers, and we do not use it for anything other than providing Golgi to you.
Who we are
Golgi is operated by ZN Labs, LLC (DBA Golgi). You can reach us at hello@golgimail.com about anything in this policy.
What we access, and why
| Data | Why we need it |
|---|---|
| Message headers — sender, recipients, subject, date | To display your mailbox and identify who is marketing a property |
| Message bodies | To display messages and identify property details in marketing email |
| Attachments — offering memoranda, flyers, rent rolls | To display them and extract property information such as size, price and physical attributes |
| Folder and label structure, read and flag state | To mirror your mailbox accurately and keep both in sync |
| Your name and email address | To create your account and send from your address |
| Contacts you correspond with | To provide address autocomplete and link brokers to properties |
Google user data specifically
If you connect a Gmail or Google Workspace account, Golgi requests Gmail scopes that allow it to read, compose, send and modify mail in that account. We use that access solely to provide the Golgi email client and its property-intelligence features to you.
Golgi's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Specifically:
- We do not transfer Google user data to third parties except as necessary to provide or improve the service, comply with applicable law, or as part of a merger or acquisition.
- We do not use Google user data for advertising.
- We do not allow humans to read Google user data unless we have your explicit consent for a specific message, it is necessary for security purposes or to comply with applicable law, or the data has been aggregated and anonymised.
- We do not use Google user data to develop, improve, or train generalised artificial intelligence or machine learning models.
How we use artificial intelligence
Golgi uses automated processing to determine whether a message is marketing an available property and to extract details such as address, size, price and asset class from that message and its attachments.
This processing produces records only in your own workspace. Your email content is not used to train any model, is not pooled with other customers' data, and does not improve any system outside your account.
Where your data lives
Golgi stores data on infrastructure operated by Supabase Inc. in the United States. Data is encrypted in transit and at rest. Each customer's data is isolated at the database level, enforced by the database itself rather than by application code.
Who we share it with
We do not sell your data. We do not share it with advertisers. We use a small number of service providers to operate Golgi — hosting, error monitoring, and the AI processing described above — and each is bound by contract to use the data only to provide that service to us.
We may disclose data if legally required to do so, and would notify you unless prohibited from doing so.
How long we keep it
We keep your data while your account is active. If you disconnect a mailbox, we delete the mail we hold from that mailbox within 30 days. If you delete your account, we delete everything associated with it within 30 days, other than records we are legally required to retain.
Your controls
- Disconnect a mailbox at any time from account settings. Golgi immediately stops accessing it.
- Revoke access from your provider — for Google at myaccount.google.com/permissions, for Microsoft at myapps.microsoft.com.
- Export your data in a machine-readable format from account settings.
- Delete your account and all its data from account settings, or by writing to us.
- Request a copy, correction, or deletion of your personal information by writing to hello@golgimail.com.
This website
golgimail.com sets no cookies, runs no third-party analytics, and embeds no advertising or social media trackers. Fonts and scripts are served from our own domain, so loading this site does not reveal your visit to any other company. Our hosting provider keeps standard access logs, including IP addresses, for security and diagnostics.
Signing in to the Golgi application itself requires a session cookie. Its only purpose is to keep you signed in.
Changes
If we make a material change to this policy we will notify account holders by email before it takes effect.