Nonna connects via your email provider's official OAuth flow. She can only read — never write, delete, or send emails. You can revoke access at any time from your Google or Microsoft account settings.
We never see or store your email password. Authentication is handled entirely by your email provider. Your credentials stay with Google or Microsoft — not us.
All data is encrypted using TLS in transit. Data at rest is encrypted on our servers. We follow industry-standard practices to ensure your booking details are protected end-to-end.
NonnaMail has completed Google's OAuth verification process. This means Google has reviewed our access scopes and confirmed we only request the permissions we actually need.
Our infrastructure runs on Amazon Web Services, leveraging enterprise-grade security, redundancy, and compliance certifications including SOC 2 and ISO 27001.
Nonna only extracts structured booking details from confirmation emails — dates, routes, confirmation numbers. We do not index or retain the full content of your emails.