Privacy policy

Last updated 27 October 2026

agentmel is a desktop email and calendar app published by OpenSkye Labs (“we”). This policy explains what the app accesses, where that data is kept, and when anything leaves your computer. The last section covers the waitlist on this website. The short version: agentmel runs on your computer and talks to Google and Microsoft directly. We do not run a server that receives your mail, and we never see your email, calendar or account data.

What agentmel accesses

When you connect an account, you sign in with Google or Microsoft in your browser and grant agentmel these permissions:

Account	Permission	Why agentmel needs it
Gmail	`gmail.modify`	Read your mail to show it; send replies and new messages you write or approve; archive, label, star, mark read and move to trash when you or an agent you approved asks.
Google Calendar	`calendar.events`	Show your meetings beside your mail, and create, change, delete or answer events when you ask.
Outlook	`Mail.ReadWrite`, `Mail.Send`	The same mail features as Gmail.
Outlook calendar	`Calendars.ReadWrite`	The same calendar features as Google Calendar.
Outlook	`User.Read`, `IMAP.AccessAsUser.All`	Your address, and a connection that tells agentmel the moment new mail arrives. agentmel uses IMAP only for that signal.

agentmel uses this access only to provide the features you see in the app. It does not request your contacts, files or any other data.

Where your data is kept

Mail, events, drafts and the audit log are stored in a database file on your computer, in the .agentmel folder in your home folder.
Sign-in tokens and API keys are stored encrypted on your computer. On macOS the encryption key is kept in your Keychain; on Windows the file is protected by Windows (DPAPI).
We have no copy of any of it, and there is no agentmel account.

When data leaves your computer

agentmel sends data off your computer only in these cases:

To Google and Microsoft, to fetch your mail and events and to carry out what you or an approved agent asked for, such as sending a message.
To an AI provider you choose. AI is off by default. If you turn it on, you pick the provider: Ollama runs on your own computer by default and then sends nothing out (if you point it at another server, the text goes there instead). If you choose Anthropic or OpenRouter with your own API key, agentmel sends that provider the text needed for the feature you used: for example, the thread you asked it to summarize or reply to, or the subjects and senders for your daily brief. That provider handles the data under its own terms with you. Where offered, experimental options that use your own Claude or ChatGPT plan through Claude Code or Codex installed on your computer send the same text to Anthropic or OpenAI.
To TypeSafe, if you turn on its judge. This optional feature checks new mail for text aimed at AI agents and helps sort it. It is off by default. When on, it sends the sender, subject and the first 1,500 characters of each new email to TypeSafe, using your own key.
To the sender’s servers when you load images in a message. Remote images are blocked until you choose to load them, because loading them can tell the sender you opened the message.
To our release server to check for app updates. The check asks for the latest version and sends none of your mail or account data.

agentmel has no analytics, advertising or tracking code, and it does not report usage to us.

AI agents you connect

agentmel lets AI agents you run yourself, such as Claude Code or another MCP client, work with your mailbox through its local command line and MCP server. These agents run on your computer under your control. You choose their access level (read, triage or send), and by default every change or message they propose waits for your approval. Data an agent reads is handled by that agent and any service it uses, under its own terms with you.

Google user data

agentmel’s use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

In particular:

Gmail and Google Calendar data is used only to provide and improve the user-facing features of agentmel that you use.
It is transferred to others only as described above: to the AI provider or judge you chose, for the feature you used, or as required by law.
It is never sold, never used for advertising, and never used to train or improve general AI or machine-learning models, by us or by anyone we transfer it to on your behalf.
No person at OpenSkye Labs reads your data. We never receive it.

Removing your data

Remove an account in Settings (or run agentmel accounts remove). This deletes that account’s mail, events and drafts from your computer and deletes its sign-in tokens. For Google accounts it also asks Google to revoke agentmel’s access.
Remove everything by deleting the app and the .agentmel folder in your home folder.
Revoke access at any time from your Google account permissions or your Microsoft account app access.

The waitlist on this website

agentmel is in a closed preview. When you join the waitlist on this website, we keep the email address you enter, and nothing else from the form.

We use it only to invite you and to write to you about the preview.
It is stored in a database we run on Supabase, in Singapore. We never sell it or share it, with one exception: when we invite a Gmail user, we add that address to the test-user list of agentmel’s Google sign-in, because Google allows only listed testers to sign in before its review.
To have your sign-up deleted, email hello@openskyelabs.xyz.

This website sets no cookies and has no analytics. Our host, Vercel, keeps standard request logs (such as IP addresses) to run and protect the site.

Children

agentmel is not directed at children under 13, and we do not knowingly collect data from them.

Changes

If we change this policy, we will post the new version here and update the date at the top of this page.

Contact

Questions about privacy: hello@openskyelabs.xyz.