Trust & Security

Your data, under lock and key — and under your control.

Beemy asks for access to the most private parts of your life. Here's exactly how that access is protected, separated, and kept in your hands.

The autonomy ladder

Trust isn't granted on connect. It's earned in stages.

  1. 01

    Read-only to start

    Connecting Gmail, your calendar and your docs doesn't hand over control. Beemy starts read-only — watching how you work before it ever acts on your behalf.

  2. 02

    Approve before it sends

    Drafts land in your drafts folder. Until you say otherwise, nothing leaves your account without a one-tap review from you.

  3. 03

    You turn the autonomy dial

    When you're ready, you decide — category by category — what Beemy can do unsupervised. Everything else keeps waiting for your say-so. Every escalation and every action still carries a plain "why this reached you," and anything Beemy handled on its own stays reviewable after the fact.

The commitments

What's guaranteed, in plain language.

TLS 1.3

Encrypted in transit

Every byte moving between you and Beemy travels over TLS 1.3.

AES-256

Encrypted at rest

Stored data is encrypted at rest with AES-256 — the same standard banks use.

architecture

Silos, not settings

Personal, work and public knowledge live in strictly separated stores. There's no toggle to get wrong.

your data stays yours

Never sold, never trained on

Your data is never sold, and never used to train shared models.

account + data

Deleted completely on request

Ask us to delete your account and everything — data, drafts, history — goes with it.

nothing without approval

Read-only until trusted

Beemy starts read-only. Nothing sends, posts or replies on your behalf until you approve it.

The differentiator

Silos are architecture, not a setting.

Personal and work knowledge don't share a database with a permission flag on top — they live in physically separate stores. A work reply can never surface your personal life, and a personal message can never surface your work, because there's no path between them to leak across. It isn't a promise Beemy keeps. It's a wall it can't cross.

Curious why we built it this way? Read the beliefs behind this →

The other side of the ledger

What Beemy will never do.

  • Never mix personal and work context — the silos are structural, not a preference.
  • Never send an email, message or report without your approval, until you say otherwise.
  • Never sell your data to anyone, for any reason.
  • Never train a shared model on your data — what it learns about you stays with you.
  • Never act on anything ambiguous or high-stakes without escalating to you first.

What's connected, and how

Minimal access, made legible.

Beemy connects to the tools you already use — and reads them read-only at first, before it ever drafts, sends or files anything on your behalf. You can see exactly what's connected, and disconnect anytime.

  • Gmail
  • Outlook / Microsoft 365rolling out
  • Google Calendar
  • Outlook Calendarrolling out
  • Slackrolling out
  • Newsletters & RSS/blogsrolling out
  • Redditrolling out
  • News & market feedsrolling out
  • Google Docsrolling out

Security FAQ

Straight answers to the hard questions.

How soon is Beemy useful — do I have to wait a week while it learns?

No. You get a quiet, triaged inbox within your first few minutes connected, and a first draft in your voice to approve that same session. Auto-send comes later, and only for the categories you've promoted on your own autonomy dial — the early wins are fast because they're read-only or approve-first, not because we skipped the trust part.

Is my data used to train AI?

No. Beemy never uses your data to train shared models. What it learns is used only to serve you, and stays inside your own silo.

Can Beemy send email without me?

Not until you explicitly allow it, and even then only for the categories you choose (say, meeting confirmations). Everything else waits in your drafts folder for a one-tap review.

How are work and personal kept apart?

Personal, work and public knowledge live in strictly separated stores — not a shared memory with a privacy toggle. A work reply can't surface your personal life, or vice versa, because there's no path between them.

What happens when I delete my account?

Everything goes with it — your account, your data, your drafts, your history. Ask us to delete, and it's gone completely.

Where is my data stored and encrypted?

In transit, everything is encrypted with TLS 1.3. At rest, it's encrypted with AES-256 — the same standard used by banks.

Can I see why an email reached me, or what Beemy did on its own?

Yes. Every escalation comes with a plain-language "why this reached you," built from the real signals behind it — not a generic flag. And anything Beemy handled automatically stays reviewable after the fact, so autonomy never becomes a black box.

Autonomy ladder, escalation, silo — the Lexicon defines the trust vocabulary on this page in plain English.

Get your time back.

Beemy is in private beta. Join the waitlist and go from connect to a quiet, triaged inbox — in your first session, not a week later.