Security Statement - Easy Mail LLC

Easy Mail is designed with a security‑first architecture.

1. Data Architecture No storage of email content, ever For connected non‑Gmail accounts, a synced metadata index (sender, subject, category, timestamp, message identifiers only) is maintained in the background to power search, filtering, and bulk actions across a user's full mailbox
2. Encryption All data encrypted in transit Synced metadata, OAuth tokens, and IMAP app‑passwords encrypted at rest
3. Access Controls OAuth tokens and IMAP credentials stored securely, encrypted at rest No internal employee access to user email data
4. Infrastructure Minimal attack surface: the backend stores only encrypted credentials and metadata needed to fulfill user‑requested actions, and never stores email content Large user-requested bulk deletions may be queued on the server and continue after the user leaves the site, subject to the service remaining available to complete the task. Auto‑rules remain opt‑in and only run if a user creates and activates one.
5. Gmail Integration Notice Gmail integration is planned and will be enabled following completion of Google OAuth verification. When enabled, Easy Mail will request only the scopes necessary to perform user‑requested actions such as bulk deletion and automated cleanup. Email content is never stored, in transit or at rest. Until verification is complete, Easy Mail does not request Gmail scopes and does not access, store, or process Gmail data in transit or at rest. Last updated: September 2026.