Security & privacy

We don’t read your email. We read what you promised.

Your inbox passes through Follow-Through once, gets reduced to the one line that matters, and the rest is gone. Here is exactly what that means — what’s true today, and what we’re actively rolling out.

True today

Read-only, always

Gmail access uses the gmail.readonly scope. Follow-Through cannot send, delete, or edit a single message — technically impossible, not just a policy.

Raw email is never stored

Your message is pulled into memory, read once by the extraction model, and discarded. What lands in our database is the follow-up — a title, a date, who’s waiting — never the source text.

Encrypted in transit

Every hop — Gmail to us, us to the model, us to your dashboard — is TLS-encrypted. Nothing about your inbox crosses the wire in the clear.

Tokens encrypted at rest

OAuth refresh tokens are encrypted at rest and deleted the moment you disconnect an integration or your account.

Row-level isolation

Postgres Row-Level Security enforces, at the database layer, that your data is only ever readable by you — not just by app-layer convention.

Rolling out now

Azure OpenAI, zero data retention

We are migrating extraction from the standard OpenAI API to an Azure OpenAI resource under a Zero Data Retention agreement — no prompt, no response, no abuse-monitoring copy retained by the model provider, by us or by Microsoft.

End-to-end encrypted follow-ups

The only thing that survives processing is the follow-up itself. We’re rolling out end-to-end encryption on that record, so the content is unreadable at rest — including to us.

SOC 2 Type II

Formal audit of these controls is underway. We’ll publish the report here the day it lands.

What actually happens to a message

  1. 1

    Gmail hands us a thread over a read-only, revocable OAuth token.

  2. 2

    The text is held in memory just long enough for the model to extract a commitment or a request.

  3. 3

    The original subject and body are discarded. Only the extracted follow-up — a title, a date, who’s waiting — is written to your account.

  4. 4

    That follow-up is what you see in your dashboard and digest. Nobody, including us, needs the source email again.

Full legal detail — sub-processors, retention windows, your rights — lives in the privacy policy.

1 Month Free Trial