Security and privacy
Where your data goes,in plain words.
What HeroSpace reads, what it keeps, what runs on your Mac and every company that touches your data on the way.
Updated
The short version
Your mail stays in Gmail.
HeroSpace reads your mail from Google as you use it and keeps no copy of your mailbox. Calendar, tickets and meeting notes work the same way.
The AI is yours, on your Mac.
Summaries and drafts run in Claude Code, Codex or Cursor on your Mac, under your own account. HeroSpace calls no AI model itself.
Agents ask before they act.
You pick what each agent can do, app by app. Anything past reading waits for your yes, and Activity lists the calls they made.
How your data moves
Every arrow is encrypted in transit (TLS)
Your Mac
The app and your agent
- Claude Code, Codex or Cursor writes your summaries and drafts here
- Summaries stay on your Mac. What it saves to open faster is encrypted with your Keychain
- A synced copy of your tasks, notes and settings
- Signing out clears it
HeroSpace’s servers
On Cloudflare, PlanetScale and Fly.io
- Pass your mail, events and tickets between your apps and your Mac, without keeping them
- Keep your tasks, notes, settings and what your agents remember
- Keep your app sign-ins encrypted. They never reach the app or an agent
- Keep each agent call to your apps, encrypted, for 30 days
Your apps
Gmail, Google Calendar, Plain, Granola
- Your mail, events, tickets and meeting notes stay where they are
- Drafts and emails you send later are Gmail drafts until they go
- Disconnect an app anytime in Settings › Integrations
What your agent reads also goes to the company behind it, Anthropic, OpenAI or Cursor, under your account and their terms.
Your mail and calendar
When you open Mail, HeroSpace’s server asks Google for your mail, with the access you gave it, and passes it to the app. It doesn’t store your messages or attachments.
A few things are kept so features work: the ID and time of an email you snooze, send later or wait on a reply to, labels you add in HeroSpace, and tasks you make from an email, which can quote it. Images in an email load through HeroSpace too, so senders never see your Mac’s IP address.
Your agents
HeroSpace runs Claude Code, Codex or Cursor on your Mac. To summarize an email or write a draft, the agent gets that email’s text and no tools, so nothing in the email can make it act.
When you ask an agent for something in the chat, it uses your apps through HeroSpace with the permissions you set for each tool. Reading goes through. Sending, moving or changing anything waits for your approval unless you set that tool to Allow, and once an agent has read someone else’s email, ticket or invite, it asks either way.
App sign-ins
When you connect an app, its sign-in is kept encrypted (AES-256-GCM) and used only by HeroSpace’s server to call that app for you. Google sign-ins are kept by Composio, which connects HeroSpace to Google. No sign-in ever reaches the Mac app, your agents or the MCP server.
Activity
Settings › Activity lists every call an agent made to your apps: what it asked for, what came back and how it went. What it asked and what came back are kept encrypted for 30 days, then deleted.
The MCP server
Claude, Codex and Cursor can reach your HeroSpace through a server on your Mac. It listens only on your Mac (127.0.0.1) and answers only with a secret the app keeps. Agents never see Spam, Trash or emails with sign-in codes.
On your Mac
Summaries are kept on your Mac only. So it opens fast, the app keeps a synced copy of your tasks, notes and settings, and what it fetched lately, which it encrypts with your Mac’s Keychain. Signing out clears them.
What we keep, and for how long
Your account, workspace, tasks, notes, settings and what your agents remember stay until you delete them or your account. Agent calls to your apps are deleted after 30 days. Error reports and logs never include what an email or note says.
Every company that touches your data
And what each one gets. None of them may use it for anything but running HeroSpace.
- Cloudflare
- Runs our servers and this website, and sends sign-in emails. Your mail passes through it on the way to your Mac.
- PlanetScale
- Our database: your account, workspace, tasks, notes, settings and encrypted app sign-ins.
- Fly.io
- Runs the sync service that keeps your tasks, notes and settings the same on every Mac.
- Composio
- Connects HeroSpace to Google. It keeps your Google sign-in and passes Gmail and Calendar requests through.
- PostHog
- Error reports, logs and usage counts, with your name and email so we can help you. Never what an email or note says.
- Plain
- Runs the support chat in the app, with what you write to us there.
- context.dev
- Finds company logos for the senders you see, from their domain only.
Found a security problem, or need this for a review?
Write to support@hero.space. We answer security reports first, and we’ll fill in your company’s questionnaire.