Letters.Back to Letters

Good boundaries.
Better email.

Letters is in private staging. This page describes the current security design and the work required before a public launch.

What Letters stores

Mailbox addresses, message content, recipients, attachments, drafts, preferences, and a record of account and delivery events. Resend provides mail transport; Supabase provides authentication, database services, and protected file storage.

Who can access your mail

Access requires a Letters workspace membership and an explicit mailbox permission. Account membership alone does not grant access to another mailbox. Provider credentials stay on the server. Messages are never used as instructions for automatic CRM actions.

Safe reading

Incoming HTML is sanitized and displayed in a sandbox. Remote images and trackers are blocked. Unvalidated attachments stay quarantined. Staging sends are limited to owner-approved recipients.

Connections are a choice

A future NightSky X connection will require an explicit, revocable grant scoped to a workspace, mailbox, and verified customer address. Letters does not copy whole mailboxes into a CRM.

Before public availability

Retention periods, export and deletion procedures, the full legal privacy notice, scanner operations, and independent security testing must be completed before customer onboarding opens.