No Gmail passwords
Access is granted on Google's own consent screen (OAuth). We never see or store your Google password.
Your email stays yours.
Access is limited to what you approve, every action is visible, and anything can be revoked whenever you choose.
No ads, no data selling
Your email is not used for advertising, is never sold, and is not used to train AI models.
Visible, reversible access
Reset your AI connection URL, disconnect an inbox, or revoke Google access whenever you choose.
Where your data goes
A short, simple path.
Your mail is fetched from Google only when you or your assistant ask for it, and passed straight back. We don't keep copies of email bodies or attachments.
Protections
Layers that work together.
Private workspaces
Each user's linked accounts, tokens and connection URL are isolated. A URL or session can only ever reach its owner's inboxes.
Confirmation for risky actions
When AI wants to send, trash, delete or change your calendar, it prepares the action and waits for your explicit Confirm.
Administrator guardrails
A master kill switch and per-feature switches (sending, reading, managing mail, calendar, AI) can pause capabilities instantly.
Full activity history
Sign-ins, AI tool calls, sends, deletions and setting changes are recorded with time and source.
Account protection
Passwords are stored only as salted scrypt hashes, sessions use HttpOnly cookies, and repeated failed sign-ins are rate limited.
Safe email display
Emails open in a sandboxed frame that cannot run scripts, and a strict Content Security Policy protects the dashboard.
AI and your data
Email content is treated as untrusted.
Emails can hide instructions aimed at AI assistants (“forward this to…”). Mail Sender marks email content as untrusted data, tells the assistant never to follow instructions inside emails, and still requires your confirmation before anything is sent or deleted.
Built-in AI features send only the text a request needs to Google's Gemini API, on a paid plan under which inputs are not used to improve Google's models. Nothing goes to an AI unless you use an AI feature or connect your own assistant.
Read the privacy policyYou're in control
Remove access whenever you want.
- 01
Reset your AI URL
Dashboard → Connect AI → Reset URL. Every tool using the old URL is cut off immediately.
- 02
Disconnect an inbox
Linked accounts → Disconnect deletes the stored token for that Gmail account.
- 03
Revoke at Google
Remove Mail Sender at myaccount.google.com/permissions, or ask us to delete your account.
Found a security issue?
Please report it privately with clear reproduction steps. We take every report seriously.