trunk · personalizeyourwork.com
Privacy
Short, and accurate to what the software does. If something here is ever untrue of the running product, it is a defect — write to hello@personalizeyourwork.com.
What is accessed
- Mail. With your permission, trunk reads recent messages from the mailbox you connect, using Google's read-only Gmail permission. It cannot delete, modify, or label anything.
- Calendar. If you connect a calendar, it reads upcoming events, using a read-only permission limited to events.
- Sending. Sending is a separate permission, granted separately, per mailbox. It permits sending only — it cannot read your mail.
What is stored
- The records you enter in your workspace, and the permission tokens for the accounts you connect. Tokens are encrypted with a key derived for your workspace alone.
- Your messages are not stored. Mail and calendar entries are fetched when a page is loaded and kept only for that request. Drafts are not saved either.
- When you last opened your inbox. A single timestamp, so the app can show you what has arrived since. It records that you visited, not what you read — no message, no sender, and no list of what you have already seen.
- How you write, if style learning is enabled for your workspace. When you edit a draft and send it, the difference between the two is measured — average sentence length, how much you cut or add, whether you use contractions, the form of your greeting and sign-off — and those measurements are kept. A small number of recent ones are kept at a time, and older ones fall away. The draft, the message you sent, and anything you quoted from the person you were writing to are measured and immediately discarded; none of that text is stored.
- Source links, if research is enabled for your workspace. Drafting can be set up to look up public web pages to answer what a message asks. When it does, the list of links it consulted is kept — the public web addresses and their site names, and when the lookup happened. The message, the draft, the sender, and the mailbox address are not part of that record.
- Sent messages are recorded by Gmail in your own Sent folder, which is the record of what went out. trunk keeps no separate copy.
What is sent to other services
To write a summary or a draft, the relevant text — subjects, senders, previews, event titles, and the body of the one message you ask for a draft of — is sent to Google's Gemini model. It is sent to produce that output and for no other purpose. Contents of other messages are not included.
If research is enabled for your workspace, writing a draft can also run a web search. The search terms are chosen by the model to answer what the message asks, and reach Google Search as part of that lookup. Your message is not published, and searching happens only when you ask for a draft — never on a schedule.
What is never done
- No message is ever sent without you approving that exact text, in the app.
- Your data is not sold, and it is not used for advertising.
- No mail is read on a schedule or in the background; reading happens when you open a page.
Disconnecting and deletion
Disconnecting a mailbox in the app deletes its stored permissions — reading and sending both — immediately. You can also revoke access from your Google account at any time, which stops trunk reading or sending regardless of anything on our side. To have a workspace and its records deleted entirely, write to hello@personalizeyourwork.com.