What does Inbox Triage store about me?

What we keep

• Mailbox sign-ins: Google and Microsoft sign-in tokens, an iCloud app-specific password, or the password for other IMAP mail, encrypted with AES-256-GCM.
• Recent mail: headers, attachment names and sizes, and the plain-text body up to 20 KB per message (for Gmail, a short preview until the message is opened), for the newest 300 or so messages per synced folder (Gmail starts at 40 and fills in over time). More if you ask your AI to load older mail, up to 1000 per folder.
• Your account: name, email, a salted hash of your password, your plan, and your preferences such as VIPs, standing rules, and sending settings.
• Passkeys and trusted browsers: the public part of each passkey only, and a record of each browser you trusted for approvals.
• API keys: a hash only. We show the key once, when you create it.
• Activity log: your most recent 5,000 events. Some include a subject line or sender.
• Undo records: kept for 7 days.

What we do not keep

• Attachment files. We fetch one only when asked and pass it through.
• Your full mailbox history.
• Your Google, Microsoft, or Apple account password.
• Your card details. Stripe handles those.
• Your search terms.

How long do you keep it?

Synced mail is a rolling window. As new mail arrives, older messages drop out and are removed. Disconnecting an inbox deletes its sign-in and synced mail. Deleting your account removes everything, and backups roll over within 30 days. Full detail is in the Privacy Policy.