Security
Your inbox is sacred ground
Giving an assistant access to your email requires trust. Here's exactly how Gatherly earns it — in plain English, no legalese.
OAuth only — we never see your password
Gatherly connects to Gmail, Outlook, and Drive through Google and Microsoft OAuth. You grant scoped permissions on their consent screens, and you can revoke access at any time from your Google or Microsoft account — independently of us.
Least-privilege scopes
We request only the scopes each feature needs — reading mail for triage, drafting for replies, calendar for scheduling. Nothing is requested "just in case", and connecting Drive or Calendar is always your explicit choice.
Tenant isolation on every table
Every row of your data carries your organisation ID, enforced by database-level Row Level Security. Queries physically cannot cross organisation boundaries — isolation is a database guarantee, not an application convention.
Encrypted in transit and at rest
All traffic runs over TLS. Data at rest is encrypted by our infrastructure provider (Supabase, on AWS). OAuth tokens are stored server-side and never exposed to the browser.
Your content is never training data
Emails, documents, and drafts are used solely to serve you — triage, drafting, and answering your own questions. We do not train models on your content, and AI calls are made with providers under terms that prohibit training on API data.
Deletion means deletion
Disconnect an account and its synced content stops flowing immediately. Delete a document and its content and embeddings are removed. Close your organisation and your data is deleted from production systems.
Payments handled by Stripe
Card details go directly to Stripe — PCI-DSS Level 1 certified. Gatherly never stores or even sees your card number.
A human answers security questions
Questions, disclosure reports, or a data processing agreement request — email security@gatherly.tech and a founder reads it.
The fine print lives in our Privacy Policy and Terms of Service.
Try it with confidence
Start free, connect one account, and revoke access anytime from your Google or Microsoft settings.
Start free