Security and privacy,stated plainly.

When you log in, the browser receives a refresh token in a cookie flagged HttpOnly, Secure and SameSite=Strict: scripts cannot read it and other sites cannot send it. The access token that actually authorises requests is short-lived and kept only in memory, never on disk.

Each refresh rotates the cookie and retires the old one. If a retired cookie is presented again, the whole session family is revoked, which is how a copied cookie is detected. "Log out everywhere" revokes every session at once.

Before any request goes to an AI provider, the names of people and clients you can see are replaced by stable tokens, and emails, phone numbers, addresses and similar identifiers are stripped. The provider's answer is translated back on your screen. Tool results are scrubbed the same way, so a task list or invoice summary reaches the model without contact details.

The assistant has no access to mailbox content or files: there are no email or Drive tools. Creating, updating or deleting anything requires your explicit approval; the model cannot execute those actions itself.