Docs

Privacy & Security Overview

TextForge is designed around a simple principle: we can't leak data we don't have.

Your Email Stays in Gmail

TextForge is an approval layer, not a data warehouse. When your AI agent needs to read an email thread, we fetch it from Gmail on demand and pass it through — we don't store it. A breach of our systems would not expose the content of your emails.

How pass-through architecture works →

What We Store

We store only what's necessary to run the service: email drafts your AI creates, thread metadata (subject lines, participants, timestamps), your approval decisions, and account settings. Everything else passes through.

Full breakdown of stored vs. pass-through data →

Gmail Access

TextForge uses the minimum Gmail permissions needed:

We don't access your Google Drive, Calendar, Contacts, or any other Google service. You can revoke access at any time from Google Account Permissions.

Everything Is Encrypted

All connections use TLS. Stored data is encrypted at rest. OAuth tokens are encrypted with per-account keys. API tokens are hashed — we never store them in plaintext.

Encryption details →

AI Agents Have Scoped Access

Each AI agent connects through a scoped API token that controls exactly what it can do. Your drafting agent can create emails but can't approve them — that's always your decision.

API Tokens & Permissions →

You Can Delete Everything

When you cancel your subscription, your data is automatically deleted 7 days after the billing period ends. If you don't want to wait, go to Settings and immediately purge all your data. Either way, everything is removed — drafts, threads, tokens, settings, everything. You can also revoke Gmail access independently from Google Account Permissions.

Account deletion details →

Learn More