It's a completely fair question. Giving any tool access to your email inbox is not a decision to make without thinking about it. Your inbox contains client conversations, financial information, personal messages, and details that matter. The concern isn't paranoid — it's sensible. So let's answer it directly, without the marketing spin.
When you connect your email to TaskOff, the agent is given read access to incoming messages. It reads each email, processes it according to the instructions you've given it, and drafts a reply. By default, it does not send anything. Every drafted response sits in your outbox, waiting for you to review and approve before it goes anywhere. Nothing leaves your account without your say-so unless you explicitly configure it to do so.
That default matters. A lot of people assume AI agents work autonomously — that once you turn them on, they start firing off emails on your behalf. That's not how it works. The agent is a drafter, not a sender. It does the work of composing. You retain the work of approving.
"The agent doesn't have opinions about your inbox. It doesn't forward things to strangers. It reads, drafts, flags what needs your attention, and waits. That's it."
What the agent can do
With standard email access, the agent can read incoming emails and categorise them by type — urgent, routine, FYI, action required. It can draft replies based on the instructions and tone you've given it. It can flag emails that need your personal attention. It can summarise long threads before you read them. And it can track emails you're waiting on a response to and remind you when they've gone unanswered too long.
What the agent cannot do
It cannot initiate new email conversations with people you haven't interacted with. It cannot access accounts or inboxes beyond what you've explicitly connected. It cannot take action outside the scope of permissions you've set. And it cannot share your data with third parties — your email data is processed to generate responses for you, not stored or used for any other purpose.
You can also revoke access at any time from your account settings. If you connect your email today and decide tomorrow that you're not comfortable with it, one click disconnects it entirely. Nothing is permanent.
Quick tip:
Start with a secondary or lower-stakes inbox if you're uncertain — a shared team address, or a specific label/folder rather than your entire mailbox. Get comfortable with how it works before connecting your primary account.
The honest risk assessment
The real risk with email agents isn't data security — it's quality control. The risk is that the agent drafts something in a tone you wouldn't use, or misreads the context of an email and responds in a way that's technically correct but socially off. That's why draft mode exists. Review the first 50 or so drafts carefully. Correct what needs correcting. Over time, the agent gets more calibrated to your style and context, and your review time drops significantly. The system earns your trust gradually, not all at once.
