SoMail / pre-launchPublic sign-up not available
SoMail
/privacy
/privacy

Pre-launch transparency

Privacy, with the blanks left visible.

This notice describes the verified Gmail Multi implementation. It does not claim a completed public release, a verified publisher, or a finished retention policy.

01

What SoMail can access today

  • Gmail messages, metadata, threads, drafts and attachments when a user invokes the relevant feature.
  • Labels, filters and forwarding settings required by the current Gmail feature set.
  • OAuth account identifiers, granted scopes and tokens needed to connect each Gmail account.
02

What is stored

  • OAuth grants in an AES-256-GCM encrypted vault.
  • A local or hosted SQLite index containing message and thread identifiers, subject, participants, dates, snippets, labels, attachment names and counts, and an optional body hash.
  • A durable action ledger containing action ID, authenticated subject and claim time.
03

What is not placed in the metadata index

Raw message bodies, HTML, attachments and raw MIME are not written to the metadata index. Full content can still be fetched and returned to the connected MCP client when the user explicitly asks for it.

04

Where requested results go

Tool results are returned to the MCP client selected by the user. When ChatGPT is that client, requested Gmail content can be returned to ChatGPT.

UNKNOWN Unresolved before public release
Publisher and data-controller identityRetention periodsBackup purge timingPublic processor listInternational transfer basis