Privacy notice
Account information, mail requests, retention and deletion.
Understand what MailMan can access, where the boundaries are, and how to disconnect.
Tools process the messages, metadata and attachments requested in authorized accounts. Read and Write are separate application permissions; provider grants can further restrict capabilities.
The implementation stores product identities, account settings, encrypted provider credentials, operation metadata, selected IDs, sender summaries and some operation results, including send-recipient metadata. Optional Composio transport depends on operator configuration. Requested mail content passes through tool results to your chosen client. Local CLI plans and journals may retain selected message information. These local files are not encrypted by the CLI.
The authenticated product user must own the account. Account status, read/write access and provider capabilities are checked before operations. A mailbox connection does not grant a shared customer workspace or team access.
Supported CLI routines use a frozen selection and exact digest approval. General write-enabled MCP tools can modify or send without a separate MailMan approval dialog. Your AI client's confirmation policy is a separate control.
Disconnect removes stored mailbox credentials, marks the connection revoked and cancels queued work. This does not remove the provider-side grant. Revoke that grant or app password in the provider's settings. Revoke personal access tokens separately in Connections.
Inspect per-account failures. Provider-accepted sending is not proof of delivery. When the outcome is unknown, check the provider before retrying; never count it as completed.
Andrew Naegele is the support and privacy contact: [email protected]. For billing questions, use [email protected]. Read the privacy notice for retention defaults, service providers and deletion limits. No certification or unverified operational encryption claim is made.
Account information, mail requests, retention and deletion.
Share an error or run ID without credentials or message contents.

Start with a free account and one read-only search. Existing accounts keep their connection.