What we're asked most often.

Your mailbox — the index, the attachments, the real identifiers — stays on your machine. When you ask the assistant to read a message, its content leaves, masked, to the assistant's provider. Nothing is sent automatically, and nothing leaves in clear text.

Structured identifiers (IBAN, card, AVS, NIR, SIRET, VAT, phone, IP) are masked and never leave. People's names, however, do leave: without them, the assistant cannot help you. For a sensitive case, the never_expose_matching rule prevents a message from leaving at all.

No. No write function exists in the software. It isn't a setting: it's absent code, verifiable by an auditor. You copy the drafted replies and send them yourself, from your own mail client.

Any IMAP provider: Gmail, Infomaniak, iCloud, work servers, and so on. And above all several at once, across several providers, in a single conversation. Microsoft 365 is not yet supported (see below).

Not yet supported. Microsoft has closed IMAP password authentication; only OAuth 2 works. Implementing it is planned development, not a technical obstacle — tell us if you need it.

Any MCP-compatible assistant (Model Context Protocol), an open standard. Verified end to end with Mistral; built to work with the others — which we don't announce as “supported” before a real test.

Depending on the plan: on your machine (A), on a small always-on machine at your place (B), or hosted with us in Switzerland or the EU (C). In every case, the relay that makes the machine reachable stores nothing.

The content you ask to read, masked: structured identifiers are replaced by stable markers. Never the real value of an identifier — only the local panel, at your place, can display it.

Plan B (small always-on machine) comes to around 600 CHF, one-off. For plans A and C, write to us according to your needs — we answer ourselves.

MyChateMail helps with privacy — local processing, masking of structured identifiers, no write function — but is not, on its own, a “GDPR anonymisation”: people's names in free text are not masked. Compliance depends on your usage.

Removing it erases the local copy (the index) and leaves the messages untouched on your mail server. Nothing is deleted server-side — the software has no means to do so anyway.