Security and privacy
What's yours stays yours.
Putting an assistant on your inbox is a real ask. Here is exactly how anymail handles your mail and your data, including where it deliberately does nothing.
You control every send
anymail organizes and drafts. It never sends an email on your behalf — every draft waits for your review, edit and approval.
Your data works only for you
Your mail is processed to categorize it and, when you ask, to draft a reply. It is not sold, and it is not used to train third-party models beyond running your own request.
Bring your own key
Connect your own AI provider key and your mail is processed under your account with that provider, not pooled with anyone else's.
Encrypted access tokens
Your Gmail access tokens are encrypted at rest, and anymail requests only the Gmail permissions it actually needs.
Least privilege
anymail asks for the narrowest Google scopes required to read, label and organize. Nothing beyond that.
Leave whenever
Disconnect a mailbox at any time. Your Gmail labels stay where they are; anymail simply stops touching the inbox.
In plain terms
Data handling, without the hedging.
What it accesses
Your email metadata and content, so it can categorize the mail and apply labels in Gmail, using the minimum Google scopes needed.
Where the AI comes in
To classify a message, anymail sends its sender, subject and a short snippet to the engine you chose. With your own key, that runs under your provider account.
What it stores
The classification result, the fields needed to show your sorted inbox, and your encrypted access tokens. Disconnecting deletes it.
GDPR
anymail is built and operated in the EU with GDPR in mind. Data-processing details are available on request while the public trust documentation is being finished.
The line it will not cross
anymail never sends, never deletes, and never leaves a list without asking.