Frequently asked questions
Straight answers about what we can see, where your data lives, and how to make it all go away.
- What can you read in my Gmail?
- Message metadata, and nothing more. The gmail.metadata scope gives us the headers: sender, recipient, subject, and dates. We never open message bodies or attachments, and we can't search your full text even if we wanted to.
- Where is my data stored, and is it safe?
- Everything we store is encrypted per-user with envelope encryption, so your records sit behind a key that's wrapped just for you. Tokens, mandates, and replies are all encrypted at rest.
- How do I stop, and can I really delete everything?
- Disconnect and purge whenever you like. A purge runs a crypto-shred: we clear your per-user key, and that leaves everything we stored permanently unreadable. There's nothing left to recover.
- Do companies actually have to comply?
- Here's the honest version. GDPR Article 17, the right to erasure, and CCPA both give you a real legal right to deletion. We draft the statutory, region-aware request, send it for you, and track the reply. We can't force a company to comply. What we can do is keep the request legally grounded and follow up until the deadline.
Worried we're reading your emails or planting trackers? We read metadata only, and we run no trackers. Here is exactly what we will never do.
What we'll never do
Never sell or share your data
We never sell your information. The only thing that ever leaves our systems is a deletion request you authorized yourself, sent to a company you picked.
Never read your email content
We use the gmail.metadata scope, so we only ever see headers: sender, subject, and date. We never read the body of a message or open an attachment.
Never fake or forge a send
Every request is real and goes out on your behalf, under an authorization mandate you signed and anyone can verify. We never fabricate or forge a send.
Never use third-party trackers
No third-party analytics, no outside scripts, no hosted fonts. The site and the app are same-origin only, so nothing about you gets shipped off to a tracker.