MailToSheet Ai
Start free
How it worksFeaturesPricingFAQDocsSign in

Security

Built for Privacy. Engineered for Trust.

Your data belongs to you. We keep email contents only while they are being processed, and we're specific about everything else we store.

Data Lifecycle: What Happens to an Email

  1. 1. Receive

    Mail servers deliver to us over TLS whenever the sending server supports it.

  2. 2. Process

    The email waits in our processing queue while OpenAI's API extracts the fields you chose.

  3. 3. Sync

    The extracted rows are written to your Google Sheet or Airtable table.

  4. 4. Delete

    The email and its attachments are deleted from the queue as soon as processing finishes.

Encryption in Transit

Our website and our connections to Google, Airtable and OpenAI use HTTPS. Incoming mail uses TLS whenever the sending server supports it.

Secure Integrations

Google Sheets access goes through one service account shared by all customers, so before writing to a sheet we check that your own account can edit it. Airtable uses your own access token, stored encrypted.

Minimal Scope

The service account can only open spreadsheets you share with it, plus read who they are shared with. It cannot see the rest of your Drive.

Security FAQ

Do you store my emails?
Only while we process them. An email waits in our processing queue until it has been handled (usually seconds, longer if a step has to be retried) and is deleted as soon as processing finishes. We don't keep the body or attachments afterwards. Your activity log records the sender, subject and extracted data, and deletes them automatically after 30 days.
Do humans read my emails?
No. Emails are processed automatically; we don't read them.
Who else processes my data?
OpenAI processes the email text and attachments through its API to extract the fields you asked for. Google or Airtable receive the extracted rows, because they host your destination. Payments are handled by Paddle.
Where is my data stored?
Extracted data is written to your destination (Google Sheets or Airtable). We also keep it in your activity log for 30 days so you can check results, then delete it automatically. Account details are kept until you delete your account from Settings.
How do you handle payment information?
We do not touch your credit card information. All payments are processed securely by Paddle, our Merchant of Record.

Have specific security requirements?

Contact our Security Team