How we protect your email privacy with AI

When you give an AI access to your email, you're trusting it with some of the most sensitive information in your life. Business deals. Personal conversations. Financial records. Medical updates.

We take that seriously. Here's exactly how Valora protects your privacy.

OAuth 2.0 — no passwords stored

Valora never asks for your Gmail password. We use Google's OAuth 2.0 — the same protocol used by every reputable app. When you connect your Gmail, Google gives us a time-limited access token. We store that token (encrypted), not your password. You can revoke access at any time from your Google account settings.

What we access

We request the minimum permissions necessary: - gmail.readonly — read your emails - gmail.send — send emails (only when you explicitly ask Zara to send) - gmail.modify — archive, star, label emails - calendar — read and modify your calendar

AI processing

Our AI features use Groq's Llama-3.3-70b model. When Zara processes your emails, only the relevant content (not your entire inbox) is sent to the AI model. We do not use your data to train AI models.

Security Shield

Valora's Security Shield automatically detects sensitive content in emails — OTPs, bank account details, passwords, medical information. These are flagged in the UI but never stored in plaintext or sent to AI services.

Database security

Your email metadata is stored in a PostgreSQL database with encrypted connections. Embedding vectors (for semantic search) contain only the semantic meaning of emails, not the original content.

Your rights

You can delete your account and all associated data at any time from Settings → Account → Delete Account. We process deletion requests immediately.

Questions? Email us at privacy@valorahq.in.