What Eve stores

Your account email and a salted password hash; the credentials you connect (mail app-passwords, integration tokens, session cookies) — encrypted at rest; summaries, drafts, tasks, and an activity log of what Eve did on your behalf; and counters of your AI usage. Eve reads your mail to triage it and draft replies; message content is processed and summarized, not warehoused — the log keeps short summaries, never full mail archives. On the hosted service the personal and message content Eve does store (summaries, draft text, task notes) is encrypted at rest too, so a stolen disk yields ciphertext.

Your address book (the People book). Eve keeps a private list of the people you correspond with — name, address, how often you write each other, and the last subject line — so she can serve you better over time. It is built only from your mail, stored only in your account (encrypted at rest like all content), never shared with other customers or third parties, erasable person-by-person on the People page, and deleted with your account.

AI processing

To triage mail and draft replies, relevant message content is sent to an AI provider (by default Anthropic; optionally a provider whose key you connect). Providers process this content under their API terms; we don't use your content to train models, and we choose API tiers designed not to either.

Security

Passwords are stored only as salted scrypt hashes (never recoverable); connected-account credentials and, on the hosted service, stored message content are encrypted at rest; all traffic is over HTTPS/TLS; sessions use signed cookies; each account's data is isolated, and administrative functions are role-restricted to the operator. We keep a security audit log (sign-ins, failures, password changes) and lock an account after repeated failed logins. We do not currently offer multi-factor authentication. If a breach affecting your data occurs, we will notify you as required by the agreement and applicable law.

What we never do

We never sell your data, never show it to other customers (every account's data is isolated), and never send email or messages on your behalf without the autonomy rules you configured — anything irreversible or high-risk always waits for your explicit approval.

Deletion & retention

Account → Danger zone offers two paths. Schedule deletion deactivates your account immediately and permanently erases it after a grace period (30 days by default), during which you can log back in and keep it. Delete now removes your account, connected credentials, and stored data immediately and permanently — from the registry and from disk, with no grace period. You can also disconnect any single mailbox or integration at any time, which deletes its stored credentials.

Right to erasure. Settings → Erase a person's data permanently deletes everything Eve has stored about a specific correspondent (drafts, proposed actions, follow-ups, queued mail, and log lines) and blocks their mail from being re-ingested afterward. Where a retention period is configured, finished records are also purged automatically once they have been idle beyond that period.

Contact

Privacy questions and data requests (access, correction, erasure) — email AI Systems Group, LLC at admin@aisystemsgroupllc.com.