Privacy and pilot terms

GippsHost Email is a private pilot operated by GippsHost for approved Life FM mailboxes. It is not yet a public service.

What access you grant

Reading and searching the connected mailbox, with separate optional permissions for drafts, attachment content, sending/replying/forwarding, organising/flags, folders and Trash/restore. Mailbox changes require review and approval on a GippsHost page. Trash moves are recoverable subject to your mail server’s retention policy. The connector cannot permanently delete messages, empty Trash or delete folders. Existing grants gain no new permissions; reconnect to select them.

Data handling

Mailbox credentials are encrypted with AES-256-GCM on GippsHost infrastructure in Australia. OAuth tokens are stored as hashes. Requested messages are fetched on demand and passed to your AI provider, whose own privacy and retention terms apply. Messages and attachment bytes are fetched on demand. For action approval, the exact proposed message, recipients, attachments or mailbox changes are temporarily stored encrypted, expires after 15 minutes and is cleared after execution, revocation or within one minute of expiry. Completed operation receipts are encrypted for up to 90 days to deduplicate retries; receipts do not contain message bodies or attachment bytes. Drafts and Sent copies are stored in the mail server.

We keep connection metadata and a minimal activity log for up to 90 days. Credentials are removed when you disconnect or when the 30-day grant expires. Revocation cannot remove content already shared with your AI provider.

Your controls

Only connect a mailbox you are authorised to use. Disconnect from Manage access, or remove the connector in Claude or ChatGPT. Contact GippsHost if you need help. The pilot has bounded search and message-size limits, and does not support permanent deletion or emptying Trash. Reading does not automatically mark messages read; that needs an explicit approved flag change.