Security and privacy
What's yours stays yours.
Putting an assistant on your inbox is a real ask. Here is exactly how anymail handles your mail and your data, including where it deliberately does nothing.
You control every send
anymail organizes and drafts. It never sends an email on your behalf — every draft waits for your review, edit and approval.
Your data works only for you
Your mail is processed to categorize it and, when you ask, to draft a reply. It is not sold, and it is not used to train third-party models beyond running your own request.
Bring your own key
Connect your own AI provider key and your mail is processed under your account with that provider, not pooled with anyone else's.
Encrypted access tokens
Your Gmail, Outlook and IMAP credentials — and your own AI key, if you set one — are encrypted at rest with AES-256-GCM. Every connection to anymail, and every connection anymail makes out, runs over TLS.
Least privilege
anymail asks for the narrowest Google scopes required to read, label and organize. Nothing beyond that.
Leave whenever
Disconnect a mailbox at any time. The labels anymail wrote stay where they are; it simply stops touching the inbox.
In plain terms
Data handling, without the hedging.
What it accesses
Your email metadata and content, so it can categorize the mail and label it in your mailbox — the minimum Google or Microsoft scopes, or the IMAP app password you supply for Yahoo, Fastmail, iCloud and the rest.
Where the AI comes in
To classify a message, anymail sends its sender, subject and a short snippet to the engine you chose. With your own key, that runs under your provider account.
What it stores
The classification result, the fields needed to show your sorted inbox, and your encrypted access tokens. Disconnecting deletes it.
How long it's kept
While a mailbox stays connected, anymail keeps what it needs to show your sorted inbox and remember your corrections. Disconnect, and everything tied to that mailbox — messages, tokens, your own AI key if you set one — is deleted immediately, not queued for later cleanup.
Sub-processors
Google and Microsoft for mail access and sign-in. DeepSeek runs the shared AI engine, unless you bring your own provider — then it's whichever one you chose, not anymail. Stripe for payment, Resend for the daily digest email, Hetzner (Germany) for hosting and the database, Cloudflare for DNS.
GDPR
anymail is built and operated in the EU with GDPR in mind. A data-processing agreement is available on request.
The line it will not cross
anymail never sends, never deletes, and never leaves a list without asking.