Privacy

Dray reads your Gmail so Claude can search it and draft replies for you. It does not keep your messages. What it keeps is a set of measurements about how you write, the rules it learns from the edits you make, and the identifiers it needs to fetch a message again later.

Dray is operated by Saranyx LLC. It is not affiliated with, endorsed by, or sponsored by Google.

When you connect a mailbox, you grant Dray the Google scope gmail.modify, which allows reading, searching, drafting, sending, labelling and moving mail to Trash. Dray never requests https://mail.google.com/, the scope that would permit permanent deletion, and has no code path that could permanently delete anything.

Dray also receives your Google account identifier, email address and name, which is how it recognises you when you return.

• ›Your Google refresh token, encrypted with AES-GCM before it is written to storage.
• ›A style card per relationship type: distributions of how you open and close, sentence and reply lengths, how often you use contractions, hedges, questions, exclamation marks and emoji, the phrases that recur in your writing, and your language mix. These are numbers and short strings, not text you wrote.
• ›Rules derived from your edits, stored as sentences such as “never open with ‘Hope this finds you well’”. The draft and the message it was compared against are discarded once the rule is derived.
• ›Exemplar references: the Gmail message id of past emails you sent, plus their length, recipient and inferred purpose. The message body is fetched from Gmail at the moment a draft is written and is not retained afterwards.
• ›An audit record of every change Dray makes to your mailbox, which you can read at any time.
• ›Your account, plan and billing status.

Message bodies, subjects, attachments, contact lists and calendar data are never written to storage that Saranyx controls. They pass through memory to answer a request and are gone when the request ends.

Drafting is the one place message content leaves Google. To write a reply in your voice, Dray sends the relevant thread, two or three of your own past emails, and your style card to Anthropic’s Claude API, which returns the draft. Anthropic processes this on Saranyx’s behalf under its commercial terms and does not use it to train models.

The host application you use Dray from, normally Claude, also sees the tool results Dray returns. That is inherent to how the Model Context Protocol works.

Dray’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, Dray does not transfer Google user data to others except as necessary to provide or improve the product, to comply with applicable law, or as part of a merger or acquisition. Dray does not use Google user data for advertising, and does not allow humans to read it except with your explicit consent, for security purposes, to comply with applicable law, or where the data has been aggregated and anonymised.

Google user data is never used to train any machine learning model, ours or anyone else’s.

• ›Cloudflare, which runs the connector and stores encrypted tokens and the audit log.
• ›Vercel, which runs this site and the account portal.
• ›Supabase, which stores accounts, style cards and derived rules.
• ›Anthropic, which processes drafting requests as described above.
• ›Stripe, which handles payment. Card details never reach Saranyx.

You can disconnect a mailbox at any time from the Dray portal, or revoke Dray’s access entirely at myaccount.google.com/permissions. Disconnecting deletes the stored refresh token immediately.

Deleting your Dray account removes your style cards, rules, exemplar references and audit log within 30 days. Write to privacy@heydray.com and we will confirm when it is done.

Saranyx LLC. Questions about this policy go to privacy@heydray.com.