Privacy

MailMux connects AI assistants to the mailboxes you choose. This page describes exactly what data the service handles.

What we store

• Your account: email address, a salted password hash (Argon2id) unless you sign in with Google or Microsoft, trial and subscription status.
• For each connected mailbox: the address, server settings, and the password, app password or sign-in token, encrypted with AES-256-GCM under a key that is not stored in the database.
• Authorizations you grant to apps and your API keys (stored as one-way hashes).
• An activity log of requests (time, app, action, counts) for 90 days. It never contains message content, subjects or correspondents.

What we do not store

Email content. Messages and attachments are fetched from your provider when an app you authorized asks for them, passed to that app, and not kept.

Google and Microsoft sign-in

When you connect a mailbox with Google or Microsoft sign-in, we request access to that mailbox (IMAP/SMTP) and your email address, and use it only to provide the features you invoke through the apps you authorize. We do not use data from your mailbox to train AI or machine-learning models, and we do not sell it or use it for advertising. You can revoke access at any time in your Google or Microsoft account settings or by removing the mailbox here.

Who receives your email content

Only the apps you authorize (for example Claude). Their handling of the data is governed by their own terms. Payment is processed by Stripe; we never see your card.

Deleting your data

Removing a mailbox deletes its credentials immediately. Deleting your account (Settings) removes all data listed above.