Your mail is yours

What we access, and why

You choose which accounts to connect; MailHandled can only reach what you connect, through each provider's official API:

• Gmail / Outlook mail — to sort incoming mail, label it in your inbox, detect urgent messages, and prepare reply drafts that wait for your approval. We also read your signature settings so drafts carry your real signature, and your sent mail so drafts sound like you.
• Google Calendar — to show your agenda, detect conflicts across your calendars, and add events you approve from emails.
• Google Drive — to file email attachments into a folder MailHandled creates. We use the narrow drive.file permission: MailHandled can only see files it created itself, never the rest of your Drive.
• Account basics — your name, email address, and profile photo, to create your account and show it's you.

What we never do

• We never send email on your behalf — replies are drafts you approve and send yourself.
• We never delete or archive your mail.
• We never use your data to train AI models — ours or anyone else's.
• We never sell your data, share it with advertisers, or use it for advertising of any kind.
• No human reads your mail. Processing is fully automated; our staff access your content only if you explicitly ask us to help debug a problem.

How your data is processed and stored

When MailHandled sorts your mail or writes a draft, the relevant message content is sent to Anthropic, our AI provider, for processing under an agreement that prohibits training on your data, and is not retained by them beyond short-term operational needs. Our application and database run on Vercel. We store: your account details, encrypted OAuth tokens, the labels/decisions the assistant made (your audit trail), drafts awaiting your approval, and the preferences it has learned from your feedback. All data is encrypted in transit and at rest. We do not store copies of your mailbox.

Google user data — Limited Use

MailHandled's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: Google user data is used only to provide the features described above — never for ads, never sold, never used to train AI models, and never read by humans except with your explicit permission for support.

Your control — revoke and delete

Disconnect any account in one click from the Accounts page — its tokens are deleted immediately and access ends. You can also revoke MailHandled from your Google Account permissions or Microsoft account at any time. To delete your MailHandled account and all stored data, email support@hoshmand.ai — deletion completes within 30 days.

Changes and contact

If this policy changes materially, we'll email account holders before the change takes effect. Questions: support@hoshmand.ai. MailHandled is built by Hoshmand AI, McLean, Virginia, USA. See also our Trust & safety page and Terms of service.