Plain English. No legalese.
The three things that matter: we don’t sell your data. We don’t train AI on it. Nothing sends without your approval. The short version of everything else is on the How it works tab; this is the precise one, for the record.
When you connect an account, you’re giving it the email and calendar data you authorize — your messages, contacts, threads, and events. It takes what it needs to build and run your copy, and nothing beyond that.
Only to run your copy: to learn who and what matter to you, draft in your voice, surface what needs you, and — once you allow it — act for you. Never for advertising. Never to train a model that anyone else’s copy touches.
Only the handful of providers that make the product run, listed under How it works — each under a data agreement, and each only with the data they need. We don’t sell it. Full stop.
Your mail is indexed by our own search engine and stored encrypted — the vault holds ciphertext only. It is not handed to a third-party search or embedding service to be indexed — the whole pipeline that reads your mail is ours end to end. Each message is encrypted before it is stored; per-account keys are live for new mail and rolling out to the rest.
To draft in your voice or read meaning out of a thread, the relevant text is sent to the AI model that does the writing — today that is Anthropic, through our account, under a data agreement that forbids training on it. That is the only egress, and we’d rather name it than let you assume it away.
If you’d rather that never touch our account at all, you can connect your own model credentials — your own provider key or your own cloud region — and every call for your data runs inside your agreement, not ours. If those credentials ever stop working, your copy stops working; it will never quietly fall back to our account. Building: the setup screen for this — today we’ll wire it up for you.
You can rule an address, a whole domain, or a subject-line keyword — privileged, confidential, whatever you choose — permanently out of bounds. Excluded mail is never stored, never indexed, never drafted from, and adding a rule also deletes anything matching it that is already here. It reads everything you allow, and nothing you don’t. Building: the screen for managing those rules yourself.
Every action your copy takes on your data is recorded — what it read, when, and each time your text went to a model. Building: the screen that shows you that record; the record itself is being kept now.
Google requires us to spell this out: the use of information received from Google Workspace scopes will adhere to the Google User Data Policy, including the Limited Use requirements. In plain terms — your Gmail and Calendar data powers only the features you see here. It is never sold, never used for advertising, never used to train AI models beyond your own copy’s personalization, and no human reads it except with your explicit consent, for security, or where the law requires.
We keep your data while your account is active. You can see it, export it, or delete it — email us and we’ll take care of it while we finish the self-serve tools — and you can cut off any connected account straight from Google. Where GDPR or CCPA apply to you, you have their full rights; we don’t carve anything out.
Deletion here means something stronger than a promise to press delete. Your stored mail is encrypted under a key that exists only for your account. When you delete, we destroy that key and then delete the files. Anything encrypted under it — including any copy that might still sit in a backup — becomes unreadable to us, permanently, because the key that opened it no longer exists anywhere. You get a written record of the moment it was destroyed. Within 30 days, every record we derived from your mail is deleted as well — the account ends whole.
Rennik, Inc. (Delaware) — the controller of your data where that term applies. privacy@ilurennik.com
Last updated August 18, 2026.