Privacy policy

Last updated 24 October 2026

Courier is a personal email client used only by its owner. No other people can sign in or connect accounts.

What Courier accesses

With the owner's consent, Courier uses Google's Gmail API (scope gmail.modify) to read messages, labels and attachments metadata; to archive, label, mark read and move messages to trash; and to send mail the owner writes. It uses the owner's basic Google profile (name and email address) to sign in.

How the data is used

• Messages are copied into Courier's private database so they can be searched and sorted.
• To sort mail into buckets, the sender, subject and first part of a message's text may be sent to Anthropic's Claude API for classification. Anthropic processes this under its API terms and doesn't use API data to train its models.
• Data isn't sold, shared with advertisers, or used for any purpose other than showing the owner their own mail.

Google API Services User Data Policy

Courier's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

Storage and security

Data is stored in a private Postgres database run by the owner. OAuth tokens are encrypted at rest, and connections use HTTPS.

Deleting data

Disconnecting the Gmail account in Courier's settings revokes access and deletes the stored tokens. The owner can delete the stored mail copy at any time. Access can also be revoked at myaccount.google.com/permissions.

Contact

Questions go to the support email shown on Courier's Google sign-in screen.