Security and privacy at Tutti
How Tutti protects your team's email: minimal Gmail access, label-only import, encrypted credentials, zero-data-retention AI, and no auto-send.
Only the mail you need
Tutti reads unread inbox threads and your Gmail drafts, never spam, and imports only threads that match one of your workspace labels. Everything else stays in Gmail and is never stored.
Zero data retention AI
Every AI request is routed only to zero-data-retention providers: email content is processed to produce a label or a draft and is never stored or trained on by the model provider.
No auto-send, ever
AI prepares drafts; a person approves every message. The model is instructed never to invent facts and to leave anything unknown as a [placeholder].
Encrypted credentials
Gmail access tokens are encrypted at rest with AES-256-GCM. All traffic uses TLS, with HTTP Strict Transport Security enforced.
Google sign-in only
There are no Tutti passwords to leak. Sign-in uses Google OAuth, sessions use secure HTTP-only cookies, and sign-in attempts are rate limited.
Workspace isolation
Every read and write is checked against workspace membership on the server and scoped to that workspace. No workspace can see another's mail.
Least privilege for people
Owner, admin, and member roles, plus fine-grained permissions for AI settings, mail accounts, team, billing, and the workspace.
You stay in control
Disconnect a mailbox and revoke Tutti's access at any time, and delete your account or workspace from settings.
Google permissions, and why
Gmail read
Read unread inbox threads and drafts so they can be labeled and drafted.
Gmail send
Send the replies your team approves, from the original account.
Gmail modify
Mirror Tutti's labels back to Gmail and keep drafts in sync.
Google Sheets read-only
Read a spreadsheet only when you choose to draft from one.
Payments
Checkout and subscriptions are handled by our payment provider, Polar; Tutti never sees or stores card numbers. Payment webhooks are signature-verified and recorded once, so a replayed event cannot change a subscription twice.
Policies and contact
Read the Privacy Policy and the Data Processing Addendum. Security questions or reports: mikayel@tutti.work.
Answer every email. Approve every send.
Connect Gmail, name your labels, and approve your first AI draft today.
14-day free trial
No credit card
Nothing sends without approval