How Plum handles your email
The short version: Plum can read your email, and that's all. It keeps as little as possible, never trains AI on it, and deletes it when you ask.
What Plum can do
Plum asks Gmail and Outlook for read-only access. That lets it read your emails to find the ones that need you, and nothing else.
Plum can't send, reply, delete, archive, move or mark anything as read. Marking something as done in Plum changes nothing in your inbox.
What Plum keeps
For each email: who sent it, the subject, when it arrived, a short excerpt of up to 500 characters and Plum's summary.
For each action: what you were asked to do, the line from the email that shows it, the deadline and what you did about it. Done and dismissed items are deleted after 30 days.
Plum reads the full text of an email only while it processes it, and doesn't keep it. Plum never reads attachments.
AI and your email
Plum uses AI models to sort your email and find what needs you. Your email is never used to train AI models, and the AI providers we use are bound by contract not to train on it or keep it.
AI can be wrong. Plum shows you the evidence for everything it flags, keeps items it's unsure about where you can see them, and never claims it can't miss anything.
Security
The sign-in tokens that let Plum read your inbox are encrypted with a managed key service and never written to logs.
No one at Plum reads your email, unless you ask us to while we help you with a problem.
Every time someone at Plum accesses or deletes data, it's recorded in an audit log.
Your controls
Disconnect an inbox and Plum deletes everything it stored from it. Delete your account and everything is gone.
Download everything Plum stores about you at any time from Settings, under Privacy and data.
Google user data
Plum's use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.