mailbud.app
Security & privacy

Built to be trusted with your inbox

Your inbox is a place of trust. mailbud reads only what it needs, stores only what it must, never trains on your mail, and never sends a thing on your behalf.

Six commitments we build around

Encryption everywhere

Subjects, senders and the reasoning behind every decision are encrypted at rest with AES-256-GCM, under a key that belongs to your account alone. So are your Microsoft tokens. All traffic is TLS, and secrets are never logged.

Least-privilege access

mailbud requests only the Microsoft Graph permissions it needs to read incoming mail and move it between your folders, nothing more.

No training on your mail

Your mail is encrypted at rest with a key unique to your account, and the content is erased after 30 days. It is never used to train any AI model, and your examples stay private to your account.

Never sends for you

mailbud reads and files. It cannot and will not send, reply to, or forward messages on your behalf.

EU hosting

Storage, processing and the AI that reads your mail all sit inside the European Union. Nothing crosses the Atlantic. Every query is scoped to your account.

GDPR-ready

A Data Processing Agreement is available. You can delete your account and all its data yourself, in one click, and we destroy your encryption key with it. Exports on request.

What mailbud can, and can't, touch

What it does

  • Read incoming messages to classify them
  • Create folders under a prefix you choose
  • Move classified mail into the right folder
  • Keep your corrections as private examples

What it never does

  • Send, reply to, or forward any email
  • Delete a message, or empty anything
  • Train AI models on your mail or examples
  • Share your data with third parties for marketing
  • Touch mailboxes other than the one you connected
Security & privacy

Security questions

What Microsoft permissions does mailbud need?

Only the Microsoft Graph scopes required to read incoming mail and move it between folders in the mailbox you connect. It never requests send permissions.

Where is my data stored?

In the European Union, on our own infrastructure in the Netherlands. The AI that classifies your mail runs in the EU as well. Mail content and access tokens are encrypted at rest with AES-256-GCM, and every query is scoped to your account.

Is my email used to train AI?

No. It is read to classify it, stored encrypted under a key that is unique to your account, and the content is erased after 30 days. It is never used to train any model, and your examples are private to your account.

Do you offer a DPA?

Yes. A Data Processing Agreement is available for business customers, see the DPA page.

Try mailbud with confidence

14 days free. Your inbox stays yours.

14-day free trial · cancel any time