Non-custodial by default. The least data required. Every rule that matters lives in the contract.
DKIM signatures are checked against the sender domain's published keys. Only sender, plan, and price are extracted. The body is discarded before anything is written.
Non-custodial. Buys execute from a contract you authorize with a spending cap you set.
No API keys or inbox permissions are ever requested. Forwarding is the only integration.
Security issues go to the security alias at the project domain. We respond within 48 hours.