Security & data handling

Mailbox access

• OAuth with Gmail and Microsoft 365 — we never see or store your password.
• You pick which folders and how far back to sync (30, 90 or 365 days).
• You can disconnect a mailbox at any time. Synced data is deleted on disconnect.

Storage

• Encrypted at rest and in transit.
• We store cleaned message text, basic metadata (from / to / subject / date) and AI summaries.
• Attachments are not stored unless you explicitly attach them to a topic.

AI use

• Your emails are used only to generate your briefs and answers.
• They are never used to train AI models.
• Every AI answer cites the original email source so you can verify.

Deletion & audit

• Delete synced mailbox data and close the account from settings — irreversible, complete.
• Sync events, brief generation and access are logged for audit.

Found a security issue?

Email security@inboxcue.com with details. We respond within 48 hours.