Privacy
Sovelma is a Windows app that reads one Gmail account on your computer. There is no Sovelma server. Your mail goes from Google to your disk and nowhere else, with one exception you control, described under "AI features".
What the app stores, and where
Everything is in %LOCALAPPDATA%\Sovelma on your computer:
- Message headers, labels and thread structure, and each message's text (up to 64 KiB), compressed.
- A search index built from that text.
- Your Google sign-in token, encrypted with Windows DPAPI for your Windows user.
Attachments are downloaded only when you open one, to a temporary folder, and are deleted after 24 hours. Remote images in mail are never loaded. Deleting the folder removes all of it.
Google data the app uses
| Access | Why |
|---|---|
| Read mail (IMAP, opened read-only) | To show, search and sort your mail on your computer |
| Labels, message labels and drafts (Gmail API) | To create the label, filing and draft you confirm |
| Filters (Gmail API) | To create or delete the Gmail filter you confirm |
Google's consent screen shows this as full mail access, because IMAP requires that scope. The app contains no code that sends mail or deletes mail. Nothing is written to your Gmail until you confirm it in the app.
Sovelma's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Your Gmail data isn't sold, isn't used for advertising, and isn't used to train AI models.
AI features
Summaries, reply drafts and filing suggestions come from the xAI API. When you open a conversation, the app sends one request containing your label names, the sender's address, the subject (up to 200 characters) and up to 1,200 characters of the message's own text. It never sends attachments, your sign-in token, or other messages in the thread.
Prepared rows are off by default. If you press P, they stay on until you close the app: the three conversations below your cursor are sent the same way before you open them, at most 300 a day. Press P again to turn them off.
xAI states that API data isn't used for training without the customer's permission and is kept for up to 30 days for abuse monitoring. The app requests no training. The AI features need your own XAI_API_KEY. Without it they are off.
Agents (MCP)
AI agents you connect to the app on your computer can read and search your local mail and propose actions. Proposals wait in the app's Review list and reach Gmail only if you approve them.
What the app does not do
- No telemetry, crash reporting or usage tracking. The app contacts only Google and xAI.
- No accounts, and no Sovelma server that holds your data.
This website
sovelma.com uses Cloudflare Web Analytics, which counts page views without cookies and without identifying you. It sets no cookies of its own.