Privacy Policy
Last updated: 2 September 2026
Zenlym is an email intelligence service. To do its job it reads the mail in the accounts you connect. This page explains exactly what that means: what we access, what we store, who else sees it, and how you get rid of it.
1. Who we are
Zenlym is operated by Autodity. For any privacy question, or to exercise any right described below, contact hello@zenlym.com.
2. What we collect
Account information
Your name, email address and authentication details, handled by our identity provider Clerk. We never see or store your password for Zenlym itself.
Mail account credentials
For Gmail and Zoho we store OAuth access and refresh tokens. For generic IMAP/SMTP accounts we store the username and password you provide, because the protocol offers no alternative. All of these are encrypted at rest.
Email content
Message headers, sender and recipient addresses, subject lines, body text and metadata from the mailboxes you connect. This is stored so the service can classify, summarise and draft replies without re-fetching your mailbox on every request.
Derived data
Classifications and priority scores, daily summaries, suggested reply drafts, and a per-account memory that records preferences learned from your corrections — for example that a particular sender is always important to you.
Website analytics
On zenlym.com we use PostHog to count page views. This is separate from the application and is not linked to your mailbox.
3. Google user data
If you connect a Gmail account, Zenlym requests these scopes and uses them only as stated:
| Scope | Why |
|---|---|
gmail.readonly | Read messages so they can be classified, prioritised and summarised. |
gmail.send | Send a reply, only when you explicitly approve that reply. |
userinfo.email, userinfo.profile, openid | Identify the connected account and show which mailbox you are viewing. |
Limited Use
Zenlym's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In particular, we do not:
- transfer or sell your Google user data to third parties for advertising, market research, or any similar purpose;
- use your Google user data to serve advertisements;
- allow humans to read your Google user data, except with your explicit consent for a specific support request, where required by law, for security investigations or abuse handling, or where the data has been aggregated and anonymised;
- use your Google user data to train generalised artificial intelligence or machine learning models.
4. AI processing
Email content is sent to OpenAI's API to produce classifications, summaries and reply drafts. Data sent through OpenAI's API is not used to train their models. No other AI provider receives your mail, and we do not train any model of our own on your content.
5. Who else receives your data
| Provider | Purpose |
|---|---|
| Neon | Database hosting |
| OpenAI | Classification, summaries and reply drafts |
| Clerk | Authentication |
| Resend | Transactional email such as notifications |
| Google, Zoho | The mail providers you choose to connect |
We do not sell your data, and we do not share it for advertising.
6. Retention and deletion
We keep your data while your account is active. You can disconnect a mailbox at any time, which removes its stored credentials and stops all processing for that account.
To delete your account and everything associated with it, email hello@zenlym.com. Deletion removes your stored email content, classifications, summaries, learned preferences and credentials. You can also revoke Zenlym's access to a Google account at any time from your Google account permissions, independently of us.
7. Security
Mail account credentials and OAuth tokens are encrypted at rest. Traffic between your browser and our servers is encrypted in transit with TLS. Access to production systems is limited to the people who operate the service. More detail is on our security page.
No system is perfectly secure, and we will not claim otherwise. If we become aware of a breach affecting your data, we will notify you.
8. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to or restrict its processing. Email hello@zenlym.com and we will respond.
9. Children
Zenlym is not intended for anyone under 16, and we do not knowingly collect their data.
10. Changes
We will update this page when our practices change and revise the date at the top. If a change materially affects how we handle your mail, we will tell you directly rather than relying on you to re-read this page.