EMAILDJ / YOUR TRUST

Security & data handling

Practical safeguards. Clear limits.

Last updated October 23, 2026

Credentials and connections

Cloud mailbox tokens, saved mail passwords and AI keys are encrypted with AES-256-GCM using the backend credential vault. The website and API use HTTPS. Production web refresh tokens are stored in a Secure, HttpOnly cookie; access tokens stay in page memory.

Credential encryption is not end-to-end encryption of your workspace. The backend needs access to connected content and credentials to provide synchronization and AI features. Mail and workspace records are stored by the connected service.

Mailbox compatibility

Gmail and Google Workspace use Google authorization; Outlook and Microsoft 365 use Microsoft authorization. EmailDJ requests permission to read and send mail for the connected account. Google access is currently in external testing and limited to approved test users; access can require reconnecting. Microsoft organizations may restrict user consent or require administrator approval. A provider registration does not guarantee access for every account.

Other mailboxes can use supported IMAP/SMTP connections with an app password or token. The backend restricts approved server hosts and rejects private or reserved addresses. IMAP uses TLS; SMTP uses TLS or STARTTLS. Provider settings, network access and server restrictions determine availability. The connected account supports one shared cloud mailbox at a time. Check the intended connection before purchasing.

AI and your inbox

Relevant email and workspace context is processed by the AI provider selected for the feature. Both Cloud AI and BYOK requests pass through EmailDJ’s service. The Cloud AI gateway is configured with prompt/response logging and caching disabled. Usage and operational metadata are still recorded. Provider retention and data-use terms apply.

Decisions stay with you

AI helps identify tasks, highlight business decisions and prepare replies. It can make mistakes. Review source evidence and deadlines, verify recipients, and choose when to send. A suggested action is not professional advice or a guarantee that every important item has been found.

Export, cancellation and deletion

Export workspace in your account downloads cloud workspace records, including saved drafts. This is not a complete mailbox backup. Cancel recurring billing through the billing portal. Revocation of provider access, subscription cancellation and deletion of stored data are separate actions. For deletion requests, contact the founder; there is no self-service, account-wide deletion control today.

Security questions

These are descriptions of implemented safeguards, not claims of independent certification, a completed security audit or Google restricted-scope verification. If you suspect a vulnerability, contact the founder with a short description and reproduction steps. Keep secrets and private message content out of public posts.

For privacy, security, account or billing questions, contact founder Denis Dai through LinkedIn or X (@olllotop). Please do not post passwords, API keys, private emails or payment details publicly.