Privacy
Your email stays with your email provider. Postscript is a window onto it, not a copy of it. Here is exactly what we keep and what we don't.
We never store your email content
The text of your emails and their attachments are never saved in our database or on our disks. When you open a message, we fetch it from Gmail or your IMAP server at that moment and show it to you.
To make reading fast, an opened message may sit in a short-lived cache for up to 1 hour. That cache is encrypted, and it is cleared when you sign out or disconnect the mailbox.
Search is done by your provider (Gmail search or IMAP search). We do not build our own search index of your mail.
What we do keep
To show your inbox list, group conversations and keep things in sync, we keep a small amount of information about each message:
- Message and conversation IDs from your provider, folders and labels
- Flags like read, starred, and whether it has attachments
- The date and size
- Sender, recipients, subject and a short preview, which are encrypted with a key unique to your workspace
We also keep your account details (name, email, password stored as a one-way hash), your workspaces and your plan.
AI
AI only runs when it is needed, for example when you open a conversation or ask for a summary. Only that message is sent to the AI provider. We never log the prompt or the email text. We store only the result (like a summary, a to-do or a code), and it is encrypted.
The AI provider used on this server is DeepSeek (api.deepseek.com). Where a provider lets us ask it not to keep data, we do.
Passwords and tokens
Gmail access tokens and IMAP or SMTP passwords are encrypted before they are stored. They are never sent back to your browser and never written to logs. Our logs leave out email addresses, subjects and message text.
Deleting and exporting
Disconnecting a mailbox deletes everything we stored for it at once: message details, AI results and the cache.
Deleting your account deletes all of your data. You can download everything we store about you any time from Settings, Account.
Questions
Write to the address on our website and a real person will answer.