Security & Privacy

Brainyply stores the minimum data necessary to provide our service:

• Account information: Email address, hashed password, business name, and preferences
• OAuth tokens: Encrypted access and refresh tokens for connected email accounts (Gmail/Outlook)
• Email metadata: Sender, subject, timestamps, and AI-generated category/priority classifications
• Email content: Temporarily stored for AI processing, then deleted according to your retention settings
• AI drafts: Generated reply drafts stored until you delete them or they expire
• Usage data: Generation counts and timestamps for billing and analytics

Important: We do not store full email bodies in our audit logs. Only metadata (sender, subject, category) is logged for troubleshooting purposes.

You control how long your email data is stored:

After the retention period, emails and drafts are automatically and permanently deleted from our systems.

You have full control over your data:

• Delete individual emails: Click the delete button on any email in your inbox
• Disconnect email accounts: Remove OAuth connections from your account settings
• Delete your account: Contact support to permanently delete all your data

When you disconnect an email account, we immediately delete the encrypted OAuth tokens. Email data previously imported will be deleted according to your retention settings.

When you connect your email account, we request minimal permissions:

We request read-only access. Brainyply cannot send, delete, or modify emails on your behalf.