Security · what the install touches

What it reads. What it keeps. What it can't do.

Lyne runs inside accounts you already own. Mail is read on your Google project and sent to the model on your API key. Every decision is written to a log with its reason and its cost.

What
In plain words
In the config
01Reads
New inbox threads, every 5 minutes. Newsletters, receipts and threads where you wrote last are skipped by rules before any model sees them.
gmail scope gmail.modify # read, drafts, labels
02Writes
Drafts, inside the thread, under the last message. Labels on every thread it looked at: Drafted, No reply, Redraft.
labels Drafted · No reply · Redraft held drafts gap found -> logged, not created
03Can't
Send. There is no send call in the code, and no setting to add one.
auto-send none # there is no setting for it
Check the code
$ grep -rnE "messages/send|drafts/send" agents/ 0 results $ every Gmail call the code makes profile · labels · threads (read, label) · drafts (create, read)
04Keeps
A decision log, with the reason and the cost of every call, and the learned voice files. Mail bodies are not stored.
stored logs/ out/ learned/*.md # mail bodies are not stored
05Runs on
Your Google Cloud project, your server, your model API key. Nothing routes through us.
runs on your Google Cloud project your server · your API key
06Google access
An internal app on your own Workspace. Only people on your domain can connect it.
oauth app internal # your Workspace domain only
07Leaving
Revoke one token. The code, the prompts and the learned files stay in your accounts.
exit revoke one token
Learned files

The learned files are plain Markdown. Open them, edit a line, and the next run uses it.

Book the call.

Book a 30-minute install call. We read your inbox together, show you what gets skipped and what gets drafted, and tell you if it's a fit.

Book a 30-minute install call