You’re in control of your data
makeo is built with privacy by design. Here’s how we respect your privacy.
Consent on first login
On first login you see a consent dialog explaining how your data is processed. You explicitly agree before we process your data.
Delete all my data
In settings you’ll find a control to delete all your data. Everything is removed permanently—mail accounts, settings, and personality configuration. A confirmation step helps prevent accidental deletion.
Automatic cache expiry
Local cache data expires automatically. Email content is not kept on your device longer than needed.
Remove mail accounts in one click
Connected mail accounts can be removed in one click. Everything tied to that connection is cleared—nothing left behind.
No mail bodies stored on our servers
We don’t store your emails on our servers. They are fetched from your provider when you use makeo.
Delete your account permanently
You can permanently delete your account in settings. Everything tied to your user is removed from our systems—no retained copies.
Mail infrastructure & data protection
makeo follows a privacy-by-design architecture aligned with strict EU processing requirements for consumers and businesses. Integrations with Gmail, Microsoft 365, iCloud, and other providers run on isolated, enterprise-grade infrastructure.
OAuth 2.0 & token-based access
We never see your mailbox password. Connections use official APIs (OAuth 2.0); makeo receives only an encrypted access token. You can revoke access anytime from your mail provider.
Isolated account segmentation
Each mailbox is handled in a closed, sandboxed environment. Strict access boundaries reduce the risk of cross-account or cross-user data exposure.
Encryption at rest and in transit
At rest — Tokens and sensitive metadata are protected with AES-256-GCM.
In transit — Traffic uses TLS 1.3.
EU hosting
Processing and storage run on infrastructure located in the EU. Your data is not moved outside European jurisdiction without explicit consent.
Zero-persistence policy
Mail content is not kept permanently on our servers. It is retrieved in real time over secure APIs and cleared from active memory after processing.
HIPAA & HITECH readiness
We can enter into a Business Associate Agreement (BAA) so protected health information (PHI) is handled to high international security standards.