Gmail and Outlook connect through Google or Microsoft sign-in, and Sektra never sees those passwords. An IMAP mailbox connects with its password, stored encrypted. WhatsApp Business connects through your provider with credentials stored encrypted. Mail stays in the mailbox; when a workspace is deleted, everything in Sektra, including the memory layer, is permanently deleted within 30 days.
How each channel connects
- Gmail and Outlook: you sign in on Google's or Microsoft's own page, and Sektra receives a token for that mailbox. Revoke it at any time from your Google or Microsoft account's security settings.
- IMAP: the mailbox password, or an app password, encrypted with AES-256-GCM before it is stored. The key lives outside the database. No screen or endpoint ever returns it.
- WhatsApp: the credentials your provider issues, encrypted the same way. Inbound webhooks are verified before anything is processed.
- Calendar: a separate sign-in that asks for calendar permissions only.
Who can see what inside your team
Access is per inbox. A member sees the inboxes they have been given under Manage access and nothing else. Admins see every shared inbox. Personal inboxes are visible to their owner only, including from admins. Notes and mentions stay inside the workspace. The assistant and Lens show a person only what that person could open by hand.
What the memory layer keeps
The memory layer is the record Sektra builds per client from your conversations: people, companies, commitments, open questions and history. Settings, then Memory, controls it. Relationship memory can be turned off. Keep memory of offers two options. Automatic covers conversations you star, snooze or note, reminders and watches, real back and forth, threads with a deadline or a promise, and people you ask about. Only what I ask for covers reminders and watches you set, people you ask the assistant about, and relationships you open in Lens. Tell the assistant to forget something and it is dropped.
Where data lives and how it is protected
Everything moves over TLS 1.2 or higher and is encrypted at rest with AES-256, on AWS in the United States. Your mail is sent to a model to produce a result and is not retained by the model service or used to train anything. Production access on Sektra's side is limited to a small number of named engineers and used only to operate the service or for support you asked for. Details on the security page.
Disconnecting, deleting an inbox, deleting a workspace
Disconnecting an inbox stops the sync and keeps what is already in Sektra readable. Delete inbox removes that inbox's emails, threads and data from Sektra and cannot be undone. To delete the whole workspace, the owner writes to support; everything, including the memory layer, is permanently deleted within 30 days, and backup copies expire on rotation after that. The mailbox itself is never touched by any of these.
Your rights
Requests to access, correct, delete or receive a copy of personal data go to the address in the privacy policy and are answered within 30 days.