Privacy

Emailgents is operated by the Vibing Co. ("we", "us"). We act as a processor for the mail you connect: you decide which mailboxes and which agents get access, and we process that mail only to provide the service to you.

• Account data: your email address, name and sign-in method.
• Mailbox credentials: OAuth tokens for Gmail and Microsoft, or app-specific passwords for iCloud and other IMAP providers. Stored encrypted, never shown again.
• Message index: sender, recipients, subject, date, folder, flags and a short snippet for each message, so agents can search quickly.
• Message bodies: fetched on demand. If you turn on body caching, they are stored encrypted; otherwise they are not kept.
• Agent activity: a log of which agent read what and when, so you can review it.
• Technical data: basic request logs used for security and debugging.

Only to run Emailgents for you: syncing your mailboxes, answering your agents' requests, showing you activity, and keeping the service secure.

We do not sell your data, show ads, use your mail to train AI models, or let our staff read your mail except when you ask us to for support or the law requires it.

Emailgents' use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Microsoft data accessed through Microsoft Graph is handled under the same rules.

We request read access to mail only. Data from these providers is used solely to provide features you can see in Emailgents and is never transferred to others except the agents you connect yourself.

• Credentials and cached bodies are encrypted with AES-256-GCM.
• All traffic, including to mail providers, is encrypted in transit with TLS.
• Each user's data is isolated at the database level.
• Agents connect with sign-in or revocable API keys, and every access is logged.

Only the infrastructure providers that host and run Emailgents, bound by confidentiality and data protection terms, and the agents you choose to connect. We disclose data to authorities only when legally required.

Removing a mailbox deletes its credentials, index and cached bodies. Deleting your account removes everything tied to it. You can also revoke Emailgents from your Google or Microsoft account settings at any time.

Depending on where you live (for example under GDPR or CCPA), you can access, correct, export or delete your data, and object to or restrict processing. You can delete mailboxes and your account yourself in Settings. You may also complain to your local data protection authority.

If we change this policy in a meaningful way, we will tell you by email or in the app before it takes effect.