Who this covers
Paperspell Email Agent is self-hosted software. Each operator installs it on their own server and connects it to their own mailboxes. There is no hosted service, no shared account and no central database. This policy describes what the software does with mail it is given access to; the operator of an installation is the data controller for it.
What is accessed
| Data | Why |
|---|---|
| Message headers — sender, recipients, subject, date, List-Id, and the headers ticket and code-review tools add | To judge importance and to tell mail addressed to you from mail you were copied on |
| Message body text, when the operator enables it | To summarise what a message is about. Can be disabled entirely, or enabled with personal data replaced by placeholders |
| The seen flag and mailbox folders | To mark a message read or move it to Trash when you ask |
Attachments are never opened or read.
Where it is stored
On the operator’s own server, in an encrypted SQLite database: sender, subject, date, importance verdict and summary. Message bodies are not stored — they are fetched when needed and discarded. OAuth tokens are held in the same encrypted database and are used only to reach the mailbox they belong to.
Who else sees it
Two services, both chosen and paid for by the operator:
- A language-model provider (Anthropic, OpenAI, Google or TypeSafe, as configured) receives the sender, recipients, subject and — if the operator enabled body access — the message text, in order to return an importance verdict and, for providers that write one, a short summary.
- Telegram receives the notification: sender, subject, date and summary, delivered to the chat the operator configured for that mailbox.
Nothing is sold, shared for advertising, or sent anywhere else. The software contains no analytics and reports nothing back to its authors.
Google user data
Access is obtained through Google OAuth with the https://mail.google.com/ scope, which is what Google requires for IMAP. It is used only for the purposes listed above: reading mail to classify it, and changing flags or folders at your request. Google user data is not used to train or improve any model, and is not transferred to anyone beyond the providers named above. Paperspell Email Agent’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
How long it is kept
Stored records remain until the operator deletes them; removing an account from the agent deletes its tokens and, when the operator confirms, its stored mail records. You can revoke the agent’s access to a Google account at any time at myaccount.google.com/permissions, which stops all further access immediately.