Only on your click
No mail is sent to an AI model automatically. Nothing runs in the background, nothing gets analyzed just in case. Without your click, nothing happens.
Privacy promise
Your mail doesn't live with us
Most AI mail tools copy your mailbox to their servers so they can search it fast. PixMail doesn't. This page explains what happens instead, and where the limits are.
In short
Three numbers that make the difference
They're built into the architecture, not just the marketing.
0mail bodies, attachments, and headers in our database
2 minutesmaximum time the folder list stays in memory, then it's gone
AES-256-GCMencryption for your IMAP and SMTP credentials
In black and white
What's in the database, and what never is
The left column is complete. If something you care about is missing from it, ask, and we'll add it here.
What we store
- Your PixMail account: the sign-in address and your password as a hash, never in plain text.
- Your mail account credentials: server, username, and password, encrypted with AES-256-GCM. The key lives outside the database, in its own file on the server.
- Your credit: every top-up and every charge as a line item, so you and we see the same numbers.
- Your AI usage: which tool, which model, how many tokens, which price. Without the text it was about.
- Addresses you write to yourself: only if you turn the contacts feature on. It's off by default.
What we never store
- Mail bodies: not in the database and not as a file on disk. The text travels from your mail server through our process to your browser, and then it's gone.
- Attachments: they pass through on the way, never held anywhere.
- Sender, subject, date: these headers don't land in any table either. The list of the folder you have open sits in memory for at most two minutes, so scrolling stays smooth.
- A searchable copy of your mailbox: doesn't exist. Search runs on your mail server, not on a copy at our end.
The path of a mail
Three stops, no copy
When you open a mail, here's what happens:
Your browser asks
The interface runs on your device. It asks our API for one specific message from one specific folder.
Our server passes it through
It signs in to your mail server with your decrypted credentials, fetches exactly that one message, and sends it on to your browser. Nothing gets written along the way.
Your mail server stays the source
Your messages stay right where they were, with your provider. Delete PixMail, and your mailbox is untouched.
That's why PixMail checks in briefly the first time you open a large folder: it genuinely asks again each time, instead of answering from a copy.
AI tools
What happens when you click "Translate"
The AI doesn't run on our servers, it runs at Anthropic or OpenAI. That's why what goes there matters.
Only the text the action needs
For text AI, recognised personal details in the selected content are replaced with placeholders before transmission and restored in the answer. Details in free text may go undetected. Your password and entire mailbox are not transmitted.
Text comes back, an amount gets charged
We don't store the reply. What lands in your usage log afterward is the tool, the model, the token count, and the price. The mail content itself doesn't.
Staying honest
What we can't promise
A promise that only lists the good parts isn't one.
AI requests can leave the EU
Anthropic's first-party API has no EU region. If an action runs through Anthropic, the text is processed in the US. With OpenAI, processing in Europe is possible. Which provider serves which tier, you can see in the app before every action.
The AI providers keep their own logs
Both keep requests for a while to check for abuse, usually seven days at Anthropic, up to 30 at OpenAI. Under both providers' terms, the data isn't used to train their models. We don't verify that ourselves, we just pass on what's promised there.
Your provider is responsible for your mailbox
PixMail is the interface in front of it. How securely your mail is stored, who has access there, and how long deleted messages stick around is up to the provider that holds your mailbox.
Read it, don't just take our word
The privacy policy says the same thing again, in the language the law requires, with legal grounds, retention periods, and your rights.