Security and privacy

What InboxBriefs can read, what it keeps, how it's protected, and what it never does.

Updated November 4, 2026

On this page

Read-only access

InboxBriefs reads your emails and calendars for your summaries, tasks and planner. It can't send, delete or change an email, nor change a calendar. Gmail and Outlook go through Google's and Microsoft's official sign-in, read-only.

What is kept

  • No copy of your mailboxes: InboxBriefs keeps what it produces (summaries, tasks) and, in teams, the documents filed from attachments.
  • Access tokens, IMAP passwords and content are encrypted at rest (AES-256-GCM). It isn't end-to-end encryption: the server decrypts them to do its work.
  • Data is hosted in the United States.
  • Your emails only serve your summaries and your questions: nothing is sold or shared for advertising.

In a team

  • The space only sees its shared mailboxes: members' personal inboxes stay private.
  • An invitation can only be accepted by the address it was sent to.
  • Admins choose who can invite, remove, manage mailboxes or automations.

The AI and your data

The assistant never writes or sends an email to your clients. What it reads — an email, a page, a message — is treated as data, never as an instruction. What it does on its own shows and can be undone.

In detail: the Security page and the privacy policy.

Didn't find your answer?

Write to us: we answer by email.