Connect your Gmail

Connecting your Gmail lets Grenier read your messages — both who you exchanged them with and the message text — so it can work out who matters to you and when you last spoke.

It reads the full text to do that, but it doesn't keep it: what Grenier saves from each message is who wrote to whom and when (plus, from LinkedIn and Facebook notification emails, the job changes and birthdays of people in your contacts; and, for a sender not yet in your contacts, just their address and how many of their messages were held back). The text goes to an AI model only when you ask for something built from it — a person's relationship profile, a draft to them, or a check on what kind of contact someone is — and then only that person's recent messages, with quoted replies stripped, the names and email addresses of the people in your contacts swapped for placeholders, and any other email address, phone number or card number swapped too. The model runs at an external inference provider under a zero-data-retention, no-training contract for our account — every provider we use is named at /legal/subprocessors. There's no fallback provider: if it's unavailable, the request fails — your content is never sent anywhere else.

The connection is read-only: Grenier never sends, deletes, or modifies any email on your behalf. The one exception is optional — if you use “Create draft in Gmail”, Google asks you for a separate permission, which Grenier uses only to add that draft to your Gmail drafts. You can disconnect at any time from Settings. What Grenier stores is never shared or sold. Some of it is encrypted at rest with a key that belongs to your account alone, some with one key shared by every account, and some — like the relationship profiles — is not encrypted at all; the privacy promise lists which is which, field by field.

For the full plain-language walkthrough, see “What Grenier can and can't see”.