What Eve stores

Your account email and a salted password hash; the credentials you connect (mail app-passwords, integration tokens, session cookies) — encrypted at rest; summaries, drafts, tasks, and an activity log of what Eve did on your behalf; and counters of your AI usage. Eve reads your mail to triage it and draft replies; message content is processed and summarized, not warehoused — the log keeps short summaries, never full mail archives. On the hosted service the personal and message content Eve does store (summaries, draft text, task notes) is encrypted at rest too, so a stolen disk yields ciphertext.

Your address book (the People book). Eve keeps a private list of the people you correspond with — name, address, how often you write each other, and the last subject line — so she can serve you better over time. It is built only from your mail, stored only in your account (encrypted at rest like all content), never shared with other customers or third parties, erasable person-by-person on the People page, and deleted with your account.

Google user data

If you connect a Google account, Eve EA accesses only the Gmail data you explicitly authorize on Google's own consent screen (mail access via the https://mail.google.com/ scope). That data is used solely to provide the features described on our home page: organizing your messages, preparing replies for your approval, scheduling, task and project management, and surfacing follow-ups. Nothing is sent from your account without your approval.

Google user data is stored the same way as everything else in your account: mirrored message content and OAuth tokens are encrypted at rest, isolated to your account alone, retained only while your account exists, and deleted when you delete your account or disconnect the mailbox. We never sell Google user data, never share it with other customers, and never use it for advertising. Humans do not read it except with your permission for support, or as required for security or by law.

Eve EA's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

AI processing

To triage mail and draft replies, relevant message content is sent to an AI provider (by default Anthropic; optionally a provider whose key you connect). Providers process this content under their API terms; we don't use your content to train models, and we choose API tiers designed not to either. This applies to Google user data as well, under the Limited Use terms above: transfers to the AI provider happen only to provide the user-facing features you asked for.

Security

Passwords are stored only as salted scrypt hashes (never recoverable); connected-account credentials and, on the hosted service, stored message content are encrypted at rest; all traffic is over HTTPS/TLS; sessions use signed cookies; each account's data is isolated, and administrative functions are role-restricted to the operator. We keep a security audit log (sign-ins, failures, password changes) and lock an account after repeated failed logins. We do not currently offer multi-factor authentication. If a breach affecting your data occurs, we will notify you as required by the agreement and applicable law.

What we never do

We never sell your data, never show it to other customers (every account's data is isolated), and never send email or messages on your behalf without the autonomy rules you configured — anything irreversible or high-risk always waits for your explicit approval.

Deletion & retention

Account → Danger zone offers two paths. Schedule deletion deactivates your account immediately and permanently erases it after a grace period (30 days by default), during which you can log back in and keep it. Delete now removes your account, connected credentials, and stored data immediately and permanently — from the registry and from disk, with no grace period. You can also disconnect any single mailbox or integration at any time, which deletes its stored credentials.

Right to erasure. Settings → Erase a person's data permanently deletes everything Eve has stored about a specific correspondent (drafts, proposed actions, follow-ups, queued mail, and log lines) and blocks their mail from being re-ingested afterward. Where a retention period is configured, finished records are also purged automatically once they have been idle beyond that period.

Contact

Privacy questions and data requests (access, correction, erasure) — email AI Systems Group, LLC at admin@aisystemsgroupllc.com.