Privacy Policy

We process account information, organization membership, connected mail account metadata, product settings, billing records, support messages, and usage information needed to operate the service.

When you connect Gmail, Outlook, or iCloud Mail, we use the provider permissions or credentials you grant to synchronize, search, draft, and act on email. Provider mail systems remain the source of truth for full email bodies, threads, attachments, and mailbox state. We store provider identifiers, lightweight metadata, versioned inbox configuration, durable work queues, source-linked analysis submitted by your connected Grok Router, drafts, sync status, provider tokens, and limited operational logs so the product can work reliably.

If you use features such as send, archive, trash, mark read or unread, flag, attachment download, or search, we may read, create, update, or transmit provider mail data through the connected provider account as needed to perform the action.

We use information to provide the product, authenticate users, synchronize mail accounts, maintain inbox configuration and work state, deliver notifications, troubleshoot issues, prevent abuse, and manage billing.

Simple Email does not run a hosted model over your mail. If you connect a Grok Router, it uses your xAI or Grok account to fetch selected provider content through Simple's authenticated MCP tools and return source-linked analysis or work status. Webhook wakeups contain opaque event identifiers rather than raw email.

We do not use connected email content, attachments, provider tokens, or derived email artifacts to train internal, custom, generalized, or third-party AI models.

Grok-assisted output can be incomplete or wrong. The product is designed to support user review and explicit approval boundaries, not to make final legal, compliance, financial, medical, employment, or other regulated decisions for you.

We use subprocessors such as Google, Microsoft, Apple, Clerk, Vercel, Upstash, Resend, Stripe, Autumn, Vercel Blob, Mapbox, and observability providers to operate Simple Email, native apps, and related Simple products. These providers process information only as needed for their role in the product.

xAI or Grok is a user-connected service rather than a Simple-hosted model provider. If you connect it, data it retrieves and work it performs are also governed by your relationship with xAI and the permissions and instructions you configure. You can disconnect the Router without losing conventional mail and calendar access in Simple.

We do not sell your personal information. We do not use connected email content for advertising.

We may update subprocessors as the product changes. Material updates will be reflected in this policy or another user-visible notice.

We retain account, billing, configuration, and derived product data while your account is active and as needed for security, legal, tax, backup, and operational purposes.

Disconnecting a mail provider stops new provider access for that connection. Provider identifiers, source-linked analysis, drafts, previews, inbox configuration, queued work, caches, and logs created before disconnect may remain until deleted through product controls, account deletion, support request, or normal retention processes.

You can request account deletion, export, or correction by contacting us. We usually complete verified deletion requests within 30 days, except where retention is required for security, billing, legal, backup, or abuse-prevention reasons.

Backups and security logs may take longer to expire, but they are restricted from ordinary product use while they age out of retention.

We use technical and organizational safeguards intended to protect information, including OAuth-based provider access and encrypted secret storage where applicable. No internet service can guarantee absolute security.

Human access to connected provider data is limited to circumstances such as support you request, security investigation, legal compliance, or preventing abuse, and is restricted to personnel or subprocessors with a need to know.

Do not send secrets, passwords, or highly sensitive regulated information to the service unless your organization has approved that use.

You can choose which accounts to connect, disconnect providers, manage settings, update billing information, and contact us about access, correction, export, or deletion requests.

Some requests may require identity verification and may be limited by security, legal, billing, or backup requirements.

Questions about privacy can be sent to info@tailoredai.solutions. We may update this policy as the product changes. The updated date shows the latest revision.