Your mail stays yours.
MorningZero touches some of your most sensitive data, so we hold it the way we'd want ours held: minimum access, encrypted, never sold, and gone the moment you say so.
Least-privilege OAuth
You connect through Google and Microsoft's own OAuth screens — we never see or store your password, and you can revoke MorningZero's access from your provider at any time.
Encrypted in transit
All traffic is encrypted in transit with TLS, and any AI API key you provide is encrypted at rest. Access to the systems that run your account is restricted.
Never trained on your email
We do not use the content of your mail to train general-purpose AI models. The model providers that process it act as our processors and are contractually bound not to train on it.
We don't hoard your inbox
We store subjects, senders, labels, timestamps and short previews to run the product. Full message bodies are processed transiently to label, summarise and answer — not stored.
Delete anytime
Disconnect a mailbox or delete your account whenever you want. On deletion we promptly remove your stored mail content and access tokens. You also choose how much history is imported.
No ads. No selling.
Your data is never sold and never used for advertising. Our use of Google and Microsoft data follows their Limited Use requirements — full stop.
What we access — and why
We ask only for the scopes the features you use actually need. Here's the whole list.
Compliance
MorningZero's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. Microsoft mail and calendar data accessed through the Microsoft Graph API is held to the same restrictions.
Where the GDPR and similar laws apply, you can access, correct, export, restrict or delete your personal data — email us to exercise those rights. Full detail lives in our Privacy Policy and Terms.
Found a vulnerability?
We take reports seriously and respond promptly. Email [email protected] with the details and steps to reproduce — please give us a chance to fix it before disclosing publicly.
Get started