Privacy Policy

When you connect a Gmail account, you grant anymail access via Google OAuth to read and organize your mail. We request the minimum scopes needed: reading messages, and creating and applying labels. We do not request permission to send email on your behalf.

We process the sender, subject and a short snippet of each email to classify it into a category and, in the drafts beta, to generate a reply you can review. We apply labels in your Gmail and, for categories you mark "move out", archive the message from your inbox. We never send email for you.

To classify a message we send its sender, subject and snippet to an AI provider. If you supply your own API key, that processing runs under your account with that provider. Our sub-processors may include: Google (Gmail API), your chosen AI provider (e.g. DeepSeek, Anthropic/Claude, OpenAI), and our EU hosting provider (Hetzner). We do not sell your data and it is not used to train third-party models beyond fulfilling your own request.

We store the classification results and the fields needed to show your sorted inbox, your encrypted OAuth tokens, and — if you enable the drafts beta — a sample of your sent mail and a summary of your writing style, used only to draft replies for you.

You can disconnect a mailbox at any time from Settings, which removes anymail's stored data for that account. Your Gmail labels remain in your account; anymail simply stops accessing your mail.

OAuth tokens are encrypted at rest. Access is on a least-privilege basis. See ourSecurity page for details.

You may request access to, correction of, or deletion of your personal data, and object to or restrict processing. Contact us and we will respond within the timeframes required by law.

anymail's use and transfer of information received from Google APIs adheres to theGoogle API Services User Data Policy, including the Limited Use requirements.

Questions or requests: privacy@anymail.watch.