Last updated: June 2026
The short version: Morgana reads your emails to triage them, then discards the content. We never store email bodies. We never sell your data. You can delete everything at any time.
Morgana is an AI email assistant that helps individuals and small teams manage their inboxes. When we say "Morgana," "we," "us," or "our," we mean the Morgana service accessible at morgana-public.onrender.com.
Account data
Email processing data
For each email Morgana processes, we store:
We never store the email body or attachments. The full email content is read in memory to make a decision, then immediately discarded.
Behavioral patterns
We track aggregate interaction patterns — which senders you reply to, how often — to improve Morgana's decisions over time. This is stored as summarized metadata, not raw email content.
Usage analytics
We use Google Analytics (GA4) to understand how people use the Morgana website. This collects anonymized page view and interaction data. See Google's Privacy Policy for details.
We do not use your data to train AI models for other users or sell it to any third party.
Morgana integrates with the following external services. Each has its own privacy policy:
Google (Gmail + Gemini AI)
gmail.modify scope. This allows us to read emails, mark them as read when archiving, and send replies. Replies are only sent when you explicitly approve a draft — Morgana never sends anything automatically.Microsoft (Outlook)
Mail.ReadWrite and Mail.Send scopes to read, triage, and send replies on your behalf. Replies are only sent when you explicitly approve a draft.Slack
Firebase Cloud Messaging (Google)
Render
We retain your data for as long as your account is active. If you delete your account, all data — including email decisions, memory, OAuth tokens, Slack tokens, and push subscriptions — is permanently deleted immediately. There is no grace period and no backups that retain your data after deletion.
OAuth tokens are stored server-side and never exposed to the browser. All communication is over HTTPS. We do not store passwords for OAuth-connected accounts. For email/password accounts, passwords are hashed using bcrypt before storage.
Morgana is not intended for users under 16 years of age. We do not knowingly collect data from children.
If we make material changes to this policy, we will update the "Last updated" date at the top of this page. Continued use of Morgana after changes constitutes acceptance of the updated policy.
Questions about this policy? Contact us at hello@morgana.app.