Where your data goes.

The sample website

The website does not connect to your email account or ask for email credentials. The interactive sample saves sample messages, drafts, tasks and events in your browser’s localStorage. Clear the site’s browser data to remove them. No application analytics SDK, advertising tracker or third-party font is included. The hosting platform may process ordinary network request information under its own policies.

The desktop workspace

The desktop build stores account credentials, OAuth tokens, cached message text, drafts, tasks, calendar entries and activity records in a local vault encrypted with Electron safeStorage and your OS keychain. It refuses the plaintext Linux storage fallback. Encryption does not protect a device whose active user session or OS is compromised.

Email providers and sign-in

Reading and sending email requires network connections directly to your selected provider. OAuth contacts Google or Microsoft. Gmail IMAP/SMTP OAuth uses the full-mail scope; this scope can authorize deletion even though this app implements no provider deletion. Microsoft OAuth requests IMAP read, SMTP send and offline access. No Patterlane cloud mailbox is implemented.

Optional local AI

AI requests are sent to a loopback HTTP model endpoint on the same device. Remote endpoints and redirects are rejected. The prompt includes cached email text and your question; the context is capped and answers may be incomplete or incorrect. Use a trusted local Ollama installation. A local service configured by you can have its own behavior and policies.

Attachments and exports

Email HTML, embedded remote images and tracking pixels are not displayed. Downloading an attachment requests the original message from the provider and saves only the file you select. Workspace JSON, calendar .ics and activity-log exports are plaintext; keep them private. Credential fields are excluded from workspace exports.

Retention and removal

Sync caches recent messages and retains them locally until trimmed or removed. Disconnecting removes the account credentials, its cached messages and account-associated drafts from the active workspace. It does not revoke the provider’s OAuth grant, remove exports, or guarantee erasure from OS backups. Revoke provider access separately. Removing the app data folder removes its active local vault.

Reviewable activity

The local activity log records actions such as connect, sync, send, import and export. It may contain addresses and task titles. It excludes passwords and tokens and is not a tamper-proof security ledger.

Contact and release status

A monitored publisher support destination is a required release item and has not been configured. The website itself does not process real email. Eligible beta users connect directly from the downloaded desktop app. See setup and release status.

← Back to Patterlane