# Security and privacy

> The rules Sydbar follows with your mail, your clients and your connections.

Source: https://sydbar.app/docs/security

## You decide what leaves

Emails, invoices and anything written to GitHub or Linear happen only when you choose them, or, for email, when an agent sends inside the [agent email](/docs/agent-email) rules you set for a business. Agent email is off until you turn it on; every agent email waits out an undo window you can cancel in, and passes checks again the moment it would go. AI drafts are drafts. The review screen shows exactly what will be sent and to whom, and Sydbar never retries a failed send on its own.

## Each business is sealed

Every request is checked against the business it belongs to. A member of one business can't see, search or change another business's mail, clients or connections. Agents follow the same rule.

## How AI is used

Sydbar uses AI to triage, draft and summarise. Emails, transcripts, documents and repo content are treated as information, never as instructions, so a message can't tell Sydbar or your agent to do something. Drafts only use what's in your mail, calls and confirmed context.

## Secrets

- Google, GitHub, Linear and Notion tokens, app passwords and AI keys stay on the server and are never shown again after you connect.
- Agent keys are stored as a one-way hash and shown only once.
- Disconnecting deletes what was stored.

## Nothing is permanently deleted

Trash in Sydbar is Gmail's Trash, which Gmail empties after 30 days. Archive is reversible. Disconnecting a mailbox keeps your conversations.

## Client portals

Portal links are long, random, unlisted and hidden from search engines. Clients see only their own scope, milestones and invoices. Turn a link off at any time.

## Public pages

Booking pages and client portals are public by link. Everything else needs you signed in.