Resources
Security
Is my email safe? Short answer: we design so the blast radius stays small.
We never train on your mail
Email content is not used to train generalized AI or marketing models. Processing is for the features you enable — triage, drafts, briefs — only.
Transient AI processing
Classification and drafting go through our AI provider (OpenAI) via its API. API data is not used to train their models; the provider may retain it briefly (up to 30 days) solely for abuse monitoring, then deletes it. We don't keep the AI's copy of your content at all.
Encrypted tokens
Gmail refresh tokens are encrypted at rest with AES-256-GCM. We store metadata (sender, subject, snippet, category, short summary) — not full message bodies.
Nothing sends without you
Wingman creates drafts and labels. There is no autopilot send. You approve every outbound message in Gmail.
Google Limited Use
Use of Gmail data adheres to the Google API Services User Data Policy, including Limited Use.
Full legal detail: Privacy Policy, DPA, Sub-processors.