Private by default

When you connect an inbox to a workspace with other people in it, LetterLeaf asks who can access it. Just me is the default. A private inbox can be read only by you and the specific people or teams you choose to share it with.

Seeing is not reading

The workspace owner can see that your inbox is connected, and can remove it, for example when you leave the company. That is governance, not access. Its contents are never shown to them.

Only you can open it up

Only the person who connected an inbox can switch it to Organization access, and LetterLeaf asks you to confirm before it does. Nobody can grant themselves access to your inbox.

Your data

LetterLeaf reads mail through your provider’s official connection and never stores your password. AI processing happens on servers in the EU. Deleting an inbox from LetterLeaf removes its messages from our systems.