Untrusted by default
Mail bodies and attachments open in a sandbox, so a message can’t reach the rest of the app.
Private by design
Your mailbox, your Mac and the model in between. Here is how each of them is protected.
Your data stays yours
Private by design, from your Mac to the model and back.
- Encrypted access Your mailbox sign‑in is stored encrypted and never reaches the app window.
- AI privacy controls We request zero data retention for model inference.
- Mailbox deletion Disconnecting starts deletion of stored mailbox data. Account chats are separate.
Questions
Do you train AI models on my mail?
No. We request zero data retention for model inference, including a training opt-out. Processing and operational metadata follow each service's policies.
Who can read my mailbox?
Only you. Other members and organization admins cannot access it. Gesand's hosting and AI providers process data to provide its features.
Is it safe to open a suspicious mail?
Mail opens in a sandbox. Scripts and tracking pixels are blocked, and remote images load through a proxy, so senders don’t learn when you read.
What happens when I disconnect a mailbox?
Cloud sync stops and deletion of stored mail and mailbox memories starts in the background. Its mail is removed from your Mac too. Account chats and uploaded chat files are separate.