Skip to content
Stillmail

Privacy

What Stillmail does with your mail, in plain terms.

Last updated 10 September 2026

What is stored

Sender address, sender name, subject, List-Id, and the date, for messages in the last 90 days. Plus the decision made about each one and the reason for it.

What is never stored

Message bodies. When sender history is not enough to route a message, the first 500 characters of its plain text are sent to Anthropic’s API for classification and discarded as soon as the answer comes back. Nothing is used to train any model.

What Stillmail can do to your mail

File messages under a label, mark them read or unread, archive them, and move them to the trash when you have marked a sender as noise or black-holed it. Trashed mail stays recoverable for 30 days in Gmail. Stillmail never permanently deletes mail and never empties the trash.

Stillmail never stars a message. That gesture is left to you alone, which is what lets it be read as you saying a message is yours to deal with.

Google user data

Stillmail requests the https://www.googleapis.com/auth/gmail.modify scope, and not full account access. That scope permits reading and re-filing your mail, and it does not permit permanent deletion — so Stillmail is not able to delete your mail even in error. Stillmail uses that access for one purpose: to sort your incoming mail, and to show you why each message was sorted the way it was.

Stillmail’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google user data is never sold, never used for advertising, and never used to train generalised models.

Access and deletion

Stillmail holds an OAuth refresh token for each connected mailbox, encrypted at rest and never sent to the browser. Disconnecting a mailbox revokes the token with Google, stops watching the mailbox, and deletes the credentials. You can delete all of the decision history at the same time. You can also revoke access at any time from your Google account permissions page.

Sharing

Nothing is sold or shared. The only third parties involved are Google (your mail provider), Supabase (the database), Vercel (hosting), and Anthropic (classification).

Contact

Questions about any of this go to hello@stillmail.ai.