Privacy & Security

Your privacy is our top priority. Learn how we protect your data.

Encryption

All data is encrypted in transit with TLS 1.3 and at rest with AES-256.

OAuth Authentication

We use Google OAuth to securely connect to your Gmail account.

Read-Only Access

MailOS can only read your emails. We cannot send, delete, or modify them.

No Data Sharing

Your email data is never shared with third parties or used for training.

What data we access

  • Email sender, recipient, subject, and body text
  • Email date and labels
  • Basic Gmail profile information (name, email address)

What we never access

  • Gmail passwords
  • Contacts or calendar information
  • Google Drive or other services
  • Attachments (we only process email metadata)

OAuth Scopes

We request the following Gmail OAuth scopes:

gmail.readonly

gmail.labels

userinfo.email

userinfo.profile

Compliance

  • GDPR compliant
  • CCPA compliant
  • SOC 2 Type II certified
  • Regular security audits

Self-hosted option

For enterprise customers, MailOS can be self-hosted on your own infrastructure. This gives you complete control over your data and eliminates any concerns about third-party storage.

Get Started