Sieve · overview
About Sieve
Sieve is a server-side email filter for Gmail. It automatically reviews every incoming message and classifies it as Solicitor(cold outreach you didn't ask for, such as sales pitches and recruiter spam) or Malicious (phishing and scam mail), applies a label, and removes it from your inbox. Mail from people you already know is left untouched. The goal is a quieter, safer inbox without you writing a single filter rule.
What Sieve does
- Classifies each new email server-side, within seconds of arrival.
- Labels cold outreach as Solicitor and phishing as Malicious, then archives it by removing the
INBOXlabel. - Leaves mail from your known contacts and existing conversations in your inbox, untouched.
- Screens links in suspicious messages against Google Web Risk.
- Learns from your corrections: move a message back and Sieve adjusts.
- Shows every decision in a dashboard you can review.
How Sieve uses your Google data
Sieve requests a single Gmail scope, gmail.modify, so it can read incoming messages to classify them, apply the Solicitor and Malicious labels, and remove the INBOX label to archive flagged mail. This is the core user-facing function of the product. Sieve sends only Source Removal privacy requests that you explicitly authorize. It never sends ordinary mail, forwards messages, or deletes your email.
To recognize people you already correspond with, Sieve checks your Sent folder for a sender's address. That only tells us such a message exists; we do not read the contents of your sent mail. We may inspect attachment metadata such as filename and type for security signals, but we never download or store attachment files. We never request your Google address book and never touch your drafts. Sign-in is direct Google OAuth, and your refresh token is encrypted at rest and used only to classify your mail.
Incoming message content is processed in memory to produce a verdict and then discarded. We store mostly metadata, such as message and thread IDs, sender domain, the label applied, and the signal that drove the decision. For mail we flag we also store the subject line, encrypted at rest, and delete it after 30 days. We never store message bodies or snippets.
Google API Services User Data Policy
Sieve's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We do not sell or transfer Google user data, use it for advertising, or use it to train models, and no human reads it except where required to investigate abuse or comply with applicable law.
Privacy and terms
For full detail on what we access, process, and store, see our Privacy Policy and Terms of Service. Questions? Email support@getsieve.io.