Is my email data secure?

Yes — the short version: OAuth-scoped access only (we never see or store your mailbox password), TLS in transit and encrypted storage on our managed database, with mailbox credentials and OAuth tokens encrypted again under a separate key we keep in a secrets vault. Every workspace is isolated by a tenant key enforced on every API request, backed by row-level security policies in the database, and sensitive actions are audit-logged. Monty uses vetted AI providers as processors to generate drafts; under our API terms your data is not used to train their models, and what Monty learns from your inbox improves your workspace only. A current security overview document is available on request from hello@montyai.co.