Scoped Google access
Premail requests Gmail access to classify and organize messages. You review the requested permissions before connecting and can revoke access at any time.
Premail Trust Center
Your inbox deserves more than promises.
Premail is designed to minimize access to your data, keep sensitive credentials on your device, and make every external data flow understandable.
Security assurance, backed by architecture
Local-first by design
Mailbox connections and filtering run in the desktop app. Premail does not operate a server that receives, stores, or processes your email.
Credentials stay with you
OAuth tokens and app-specific passwords are stored in your operating system keychain. They are not sent to or retained by Premail servers.
CASA
Understanding Google's security reviews
The Cloud Application Security Assessment framework is an industry-standardized security assessment for applications that access Google user data. Our CASA overview explains the framework and how it relates to Gmail applications.
CASA and Google OAuth verification are complementary checks. OAuth verification reviews the app identity, requested permissions, and consent experience. CASA evaluates the security controls surrounding the integration. Neither changes Premail's local-first architecture: Gmail API requests still travel directly between the app on your computer and Google.
A security assessment is a point-in-time evaluation, not a guarantee that any software is risk-free. Premail continues to maintain and improve its controls as the product evolves.
Where your data goes
Premail has no cloud inbox in the middle. Connections go from your computer to the services you explicitly choose.
- 1
Mail provider
The app connects directly to Gmail, Outlook, or iCloud to retrieve and organize mail.
- 2
Your computer
Rules, account configuration, and activity history stay local to the Premail app.
- 3
Your chosen AI
Classification goes directly to the AI provider you configure, or stays entirely on-device when you use Ollama.
Policies and disclosure
Privacy Policy
What Premail collects, processes, retains, and never sells.
AI Disclosure
How classification works and what each AI provider receives.
Terms of Service
The terms and responsibilities that apply when using Premail.
Found a security issue?
Please report suspected vulnerabilities privately so they can be investigated before public disclosure.