What we store

What we keep

• Mailbox sign-ins: Google and Microsoft sign-in tokens, or iCloud and IMAP app passwords, encrypted with AES-256-GCM.
• Recent mail: headers, a plain-text copy, and attachment names and sizes for the newest 300 or so messages per synced folder. More if you ask your AI to load older mail, up to 1000 per folder.
• Your account: name, email, a salted hash of your password, your plan, and your preferences such as VIPs.
• API keys: a hash only. We show the key once, when you create it.
• Activity log: your most recent 5,000 events. Some include a subject line or sender.
• Undo records: kept for 24 hours.

What we do not keep

• Attachment files. We fetch one only when asked and pass it through.
• Your full mailbox history.
• Your Google, Microsoft, or Apple account password.
• Your card details. Stripe handles those.
• Your search terms.

How long

Synced mail is a rolling window. As new mail arrives, older messages drop out and are removed. Disconnecting an inbox deletes its sign-in and synced mail. Deleting your account removes everything, and backups roll over within 30 days. Full detail is in the Privacy Policy.