Security
Your inbox is sacred. Here's how we protect it.
The short version
- We read emails to classify them and move them. We never send emails on your behalf.
- Credentials are encrypted at rest. All traffic uses HTTPS/TLS.
- No tracking, no advertising on the product itself, no data sales. Ever.
Why we need inbox access
What we do
- Read email headers and content for classification
- Move emails between folders according to your rules
- Optionally forward, flag or mark emails as read when you tell us to
What we don't
- Send new emails on your behalf
- Access contacts or calendar
- Persist the body of your emails
- Share data with third parties for marketing
How your data flows
Each email is read into memory, sent to the LLM with your category prompts, then the resulting action (move / flag / mark-read / forward) is executed via IMAP/SMTP on your mail server. Long-term we keep only a snapshot — subject, sender and date — so the History tab can show what the AI did and let you undo it. Full bodies are never persisted. Dry-run previews are kept for 7 days, then deleted automatically.
Encryption & access control
- Credentials encrypted at rest. Your IMAP/SMTP password is encrypted with industry-standard symmetric encryption before it ever touches the database.
- HTTPS everywhere. All communication between your browser, our backend, the LLM and your mail provider rides over TLS.
- No plain-text passwords. We never log, print or store credentials in clear text.
- Magic-link sign-in. No reusable passwords for the product itself — you sign in with a one-time code emailed to your address.
Maximum-control options
Bring your own LLM
Point the classifier at any OpenAI-compatible endpoint — your own OpenAI key, Anthropic via proxy, or a local Ollama instance. No email content ever leaves your control.
Self-host
The whole stack is dockerized. Run it on your own server and the data path never touches us. Ask us if you need a hand setting it up — [email protected].
What we don't do
No product analytics
Inside the app: no Google Analytics, no tracking pixels.
No ads
We sell a subscription, not your attention.
No data sales
Your email data is never sold, shared or used to train models.