oh. consent-first email
on your own mailboxes.

Yes. 14 days, no card. You get the whole product, with 500 credits to try drafts and the Screener's suggestions. Give no card, and the trial ends on its own after 14 days. The desktop app is free and needs no trial.

The unit your plan is measured in. Actions cost what they cost us: screening a new sender or filing a message is 1 credit, a drafted reply 15. Drafting reads a whole thread and writes prose, so it costs more than sorting one message — pricing them the same would only mean charging everybody for the expensive one. When the monthly budget runs out, mail keeps flowing rules-only until the next cycle. There are no overage charges — ever.

Not as a matter of practice, and our admin tools do not display message content — every response the console can produce is checked by a test that writes a marker into every text column of every table and fails if any of it reaches a staff response. The database refuses them too: the console reads through a column-restricted database role that cannot select message content, and it verifies that restriction before it reads anything. The honest fine print: Cloud mail is stored unencrypted at the application level and is not end-to-end encrypted, so someone with production database access could technically read it; that access is held by very few people, and the product privacy policy will spell out who and under what conditions when it publishes. On Desktop the question doesn't arise — your mail never reaches our servers at all: the app runs as a real mail client against your own server, on macOS, Windows and Linux alike. Separately, nobody else gets to watch you read either: a spy pixel is blocked by default — loading them is a choice you would have to make in Settings — and one disguised as an ordinary picture loads like any picture each time the message's pictures are fetched, before it is blocked; the standalone phone app, which fetches pictures itself, shows it. On Cloud, ordinary pictures load through our own proxy, so the sender's server sees us and never your address; the desktop app and the standalone phone app fetch pictures themselves, so there the sender sees that device's address.

Anytime. Your mail never needs exporting — the originals live on your own server, in ordinary folders ohmail created in place, and nothing we do touches them. Be clear about what Cloud holds, though: a full copy of that mail — bodies, headers, subjects and senders — alongside your rules, tags and notes, because that is what makes search and push work. All of it is deleted from the live database with your account.

Nothing destructive. The folders you already have are left exactly as they are; ohmail organizes new mail into real IMAP folders on your server. Everything stays visible to any other mail client, on any device.

The macOS and Windows builds are not signed by Apple or Microsoft yet, so the first launch asks you to confirm it once. Nothing in the app phones home except one signed update check.