Home
/
Security
Security

Security and privacy at Tutti

How Tutti protects your team's email: minimal Gmail access, label-only import, encrypted credentials, zero-data-retention AI, and no auto-send.

Only the mail you need

Tutti reads unread inbox threads and your Gmail drafts, never spam, and imports only threads that match one of your workspace labels. Everything else stays in Gmail and is never stored.

Zero data retention AI

Every AI request is routed only to zero-data-retention providers: email content is processed to produce a label or a draft and is never stored or trained on by the model provider.

No auto-send, ever

AI prepares drafts; a person approves every message. The model is instructed never to invent facts and to leave anything unknown as a [placeholder].

Encrypted credentials

Gmail access tokens are encrypted at rest with AES-256-GCM. All traffic uses TLS, with HTTP Strict Transport Security enforced.

Google sign-in only

There are no Tutti passwords to leak. Sign-in uses Google OAuth, sessions use secure HTTP-only cookies, and sign-in attempts are rate limited.

Workspace isolation

Every read and write is checked against workspace membership on the server and scoped to that workspace. No workspace can see another's mail.

Least privilege for people

Owner, admin, and member roles, plus fine-grained permissions for AI settings, mail accounts, team, billing, and the workspace.

You stay in control

Disconnect a mailbox and revoke Tutti's access at any time, and delete your account or workspace from settings.

Google permissions, and why

Gmail read

Read unread inbox threads and drafts so they can be labeled and drafted.

Gmail send

Send the replies your team approves, from the original account.

Gmail modify

Mirror Tutti's labels back to Gmail and keep drafts in sync.

Google Sheets read-only

Read a spreadsheet only when you choose to draft from one.

Payments

Checkout and subscriptions are handled by our payment provider, Polar; Tutti never sees or stores card numbers. Payment webhooks are signature-verified and recorded once, so a replayed event cannot change a subscription twice.

Read the Privacy Policy and the Data Processing Addendum. Security questions or reports: mikayel@tutti.work.

Answer every email. Approve every send.

Connect Gmail, name your labels, and approve your first AI draft today.

14-day free trial

No credit card

Nothing sends without approval