Question 1

Can AI Emaily employees read my email?

Accepted Answer

No. Access to your mail is restricted by least-privilege controls, and we don't read your content. The narrow exceptions — with your explicit consent for a specific message during support, where required by law, or for security — mirror what we commit to in our Privacy Policy and Google's Limited Use requirements.

Question 2

Do you train AI models on my emails?

Accepted Answer

Never. Your email, calendar, and contacts are never used to train, fine-tune, or improve any AI model — ours or a provider's. Cloud inference runs under zero-data-retention terms, so prompts and outputs are processed to produce your result and then discarded.

Question 3

What happens to my data if I cancel?

Accepted Answer

You can export your data before you go. After you close your account, we delete or anonymize your data within a commercially reasonable period, except where the law requires us to retain something. Encrypted backups roll off on a short, defined schedule.

Question 4

Where is my data stored and is it encrypted?

Accepted Answer

Data is encrypted in transit (TLS) and at rest. Message bodies live in encrypted object storage referenced by id, and crown-jewel secrets like OAuth tokens and BYOK keys are envelope-encrypted via a key-management service and never logged. Data-residency options are available.

Question 5

How do you stop the AI from being tricked by a malicious email?

Accepted Answer

We treat every incoming email as untrusted input. The agent runs behind prompt-injection defenses and a strict action allowlist, tracking pixels are blocked, links are sandboxed, and AI output is validated before it's rendered or sent — so a hostile message can't quietly make the agent act against you.

Question 6

Can I keep sensitive email off the cloud entirely?

Accepted Answer

Yes. You can run sensitive triage and drafting on an on-device model so the content never leaves your device, or bring your own model key (BYOK) so inference runs on your own provider account with no usage caps from us.

Question 7

Is the autonomous agent safe to turn on?

Accepted Answer

It's designed to be. Start in Manual or Copilot, where a human approves before anything sends. Autopilot is opt-in and bounded by the senders, topics, and confidence thresholds you set, with a send delay, one-tap undo, a kill switch, and a full audit trail on every action.

Question 8

How do I report a security issue?

Accepted Answer

Email support@aiemaily.com with the details. We practice responsible disclosure, respond quickly, and credit researchers who help us keep AI Emaily safe.

Question 9

Does AI Emaily read my emails?

Accepted Answer

AI Emaily processes your mail only to power the features you turn on — triage, summaries, drafts, and the actions you ask for. People at AI Emaily don't read your content; access is gated by least-privilege controls. When a model does read a message, it's under zero-data-retention terms, so the content is processed to produce your result and then discarded. You can run sensitive work on an on-device model or bring your own key so cloud providers never see that mail at all.

Question 10

Do you sell my data or use it for ads?

Accepted Answer

No. We don't sell or rent your personal data, and we don't use your mail, calendar, or contacts for advertising — ours or anyone else's. Our business is the subscription you pay for, not your inbox. We don't build ad profiles, and we publish a sub-processor list so you can see exactly which vendors touch your data and why. This is a contractual commitment under GDPR and CCPA, not just a promise.

Question 11

Is AI Emaily GDPR and CCPA compliant?

Accepted Answer

We're built to align with GDPR, UK GDPR, and CCPA / CPRA. You can access, correct, port, or delete your personal data, and we respond to requests within the windows the law requires. A Data Processing Agreement is available for business customers, transfers rely on Standard Contractual Clauses, and we maintain a published sub-processor list. We don't sell personal data. For the full legal detail, see our Privacy Policy.

Question 12

Where is my email data stored?

Accepted Answer

Your data lives in encrypted object storage and databases, encrypted in transit with TLS and at rest. Message bodies are stored encrypted and referenced by id, while crown-jewel secrets — OAuth tokens and BYOK keys — are envelope-encrypted via a key-management service and never written to logs. Data-residency options let eligible customers keep data in a specific region. Backups are encrypted, access-controlled, and roll off on a short, defined schedule.

Question 13

Can I delete all my data?

Accepted Answer

Yes, any time. Export your mail and settings before you go, then close your account and we delete or anonymize your data within a commercially reasonable period — except for anything the law requires us to keep. Encrypted backups containing it roll off on a short, defined retention schedule. You can also issue a GDPR or CCPA deletion request directly, and we honor it within the time the law allows.

Question 14

What permissions does AI Emaily need?

Accepted Answer

Only the minimum access the features you use actually require — nothing more. Gmail and Google Workspace connect over IMAP/SMTP with an app password you control; Outlook and Microsoft 365 use OAuth with least-privilege scopes you review at connect time. We never use your mailbox data to train generalized AI models. Disconnecting a mailbox (or revoking the app password) cuts our access immediately, so you're always one step from ending the connection entirely.

Question 15

How is my account itself protected?

Accepted Answer

Account access is protected with modern authentication, including two-factor authentication, and privileged actions run server-side behind object-level authorization checks rather than being trusted from the client. Sessions can be reviewed and revoked, sensitive actions are audit-logged with actor and reason, and we monitor for anomalies with a defined incident-response process. Combined with envelope-encrypted secrets and strict CORS and CSP, your account stays yours even if a device is lost.

Question 16

Are my attachments scanned or stored?

Accepted Answer

Attachments are treated like the rest of your mail: encrypted in transit and at rest, stored encrypted and referenced by id, and never used to train models. They're processed only to deliver features you've enabled, such as search or summarizing a document you asked about, under zero-retention inference. Incoming files and links are treated as untrusted input, so tracking pixels are blocked and links are sandboxed before anything is rendered or acted on.

Your inbox is sacred.

Private by architecture, not by promise.

Least access, on every provider.

Crown jewels, treated like crown jewels.

Discipline behind the scenes.

Autonomy you can take back any time.

It's your data — and it stays that way.

The paperwork, handled.

Straight answers to the hard questions.

Email you can finally trust to act.