Security & Privacy

Chuck has a playful personality, but when it comes to your email security and privacy, we don't mess around. Here's exactly how Chuck keeps your data safe.

Authentication

OAuth2 — no passwords stored. Chuck never sees or stores your email password. We use OAuth2, the industry-standard protocol used by Google, Microsoft, and Apple. You authenticate directly with your email provider, and Chuck receives a limited-access token. If you ever want to revoke access, you can do it from your email provider's settings at any time.

Data Handling

Chuck reads metadata, not your messages. To organize your inbox, Chuck processes email headers — sender names, subject lines, dates, and sizes. We use this information to group and sort your messages so you can take action in bulk. Chuck does not read, store, or analyze the content of your emails.

No data selling. Ever. Your email data is yours. We don't sell it, share it with advertisers, or use it to build marketing profiles. Our business model is simple: you pay for Chuck Pro, and we build a better app. That's it.

Infrastructure

Hosted on IBM Cloud. Chuck's backend runs on IBM Cloud infrastructure, which meets rigorous enterprise security and compliance standards. Your data is encrypted in transit (TLS) and at rest.

Google-certified. Chuck has completed Google's security verification process for apps that access Gmail. This means Google has reviewed our data handling practices and confirmed that Chuck meets their requirements for user data protection.

Your Control

Revoke access anytime. You can disconnect Chuck from your email account at any time through your email provider's security settings. When you do, Chuck's access token is immediately invalidated.

Delete your data. Contact us at support@chuck.email to request complete deletion of your account data. We'll confirm deletion within 48 hours.

Compliance

Chuck is built and maintained by 410 Labs, Inc. We comply with applicable data protection regulations including GDPR. For details, see our Privacy Policy, Terms of Service, and GDPR information.

Vulnerability Disclosure

Security researchers: we welcome responsible disclosure. See our Vulnerability Disclosure Program for details on how to report security issues.

Questions?

If you have questions about Chuck's security or privacy practices, reach out to us at support@chuck.email. We're happy to explain anything in more detail.