Privacy and security

We read your email only to label it and to carry out what your rules allow. We don't store email content, we never use it to train AI models, and your AI agent never gets Gmail access of its own.

What we read

First we label a sample of up to 100 recent emails, so you can check our labels before you build a Shell. Once you create one, we label your newest 1,000 emails and then new mail as it arrives. To label a message we read its sender, subject and text, and an attachment only when nothing else will do. The labels appear in Gmail under clam/, where you can change them.

What we keep

We don't store email content: we read a message to label it or to run an allowed action, then drop it. What we do keep:

• The trial sample (ids, dates, sender and subject): until you finish setup, or 14 days.
• Audit log (each request, its outcome and what it targeted, never bodies): 12 months.
• Operational and error logs (no mailbox content, rules or credentials): 30 days.
• Account data (Shells, rules, keys, settings): while your account is active, then 90 days after your trial or subscription ends.

Deleting your account deletes all of it. See Remove access.

Who else sees your mail

To label a message we send its content to an AI provider, which returns the labels and nothing else. Neither we nor our providers use your Google data to train AI models, in line with Google's Limited Use requirements. No one at Clam reads your mail unless you ask for help with it, we're investigating abuse, or the law requires it. We don't sell your data.

What your agent sees

Your agent never connects to Gmail. It connects to a Shell, and we hold the Google permission. We check every request against the Shell's rules before anything is read or sent, and we log every one, allowed or not. An allowed request reads only what it needs; a blocked one reads nothing. What your agent can do

Where your data lives

We run in the United States on Railway, and Clerk, Inngest, OpenAI, Anthropic, Resend, Sentry and (only for WhatsApp) Bird help run the service, as listed in the Data Processing Agreement. Data is encrypted in transit and at rest.

The legal pages

This page is a summary. The Privacy Policy binds us, and the Terms of Service set out the service. To ask about your data, or have it deleted, write to privacy@useclam.ai or use the contact page.