Security and control

Promise asks for sensitive access, so the boundaries should be clear.

A factual overview of how Promise handles connected accounts, AI processing, evidence, sending, and account control.

Connected account access

Promise uses Google and Microsoft authorization to connect Gmail and Outlook accounts. Connected mailbox content is used to provide the product: finding commitments, follow-ups, important details, and evidence-backed reminders.

Storage and encryption

OAuth tokens are encrypted before storage. Promise uses encrypted transport and infrastructure safeguards intended for sensitive personal information. No system can be guaranteed perfectly secure.

AI processing

Promise sends AI providers only the content and context needed for the requested feature. The Privacy Policy states that private content is not used to train shared or public AI models.

Sending boundaries

Promise can help draft replies, but it does not send email without review and explicit confirmation by the user.

Disconnecting and deletion

You can revoke Google or Microsoft access through the provider account controls. You can also request deletion of Promise account data by contacting privacy support at privacy@usepromise.ai.