Last updated: June 2026
Gusion Mail connects to your Google account using restricted Gmail and Calendar API scopes. We only request the minimum permissions necessary to view, modify, and compose emails and manage calendar events as requested through keyboard commands or AI agent tools.
Your credentials and synced data are stored inside an isolated multi-tenant database sandbox. Every user's connection parameters are encrypted using a rotatable, unique Data Encryption Key (DEK). We do not store email body texts locally on our main application database tables; they reside strictly inside the secure integration caching layers.
We comply fully with the Google CASA (Cloud Application Security Assessment) requirements. Regular automated vulnerability checks are run to ensure integration hooks remain secure and uncompromised.
You maintain complete control over your data. You can export a full backup of your account meta-information at any time from your settings panel. Deleting your account will instantly and permanently purge your local database rows, clear cached credentials, and revoke Google integration tokens.