Security
closegraph.com · September 4, 2026
What is read
Four headers from each message: from, to, cc, and date. The permission closegraph asks Google for cannot return message text or attachments. It could return subject lines; closegraph does not ask for them. Only conversations where mail went both ways are read at all. The listing of your mailbox that finds those conversations carries message ids and nothing else.
Where it lives
One server, run by us, reachable only through an encrypted tunnel. The token that lets closegraph re-read headers is encrypted at rest with a key that is not stored beside the data. Backups are encrypted with a second key that is kept off the server, so a copied backup is unreadable. The server keeps 14 days of backups; one offline copy keeps 30.
Who can see what
A member searches a first and last name and sees, for each member who corresponds with that person, a closeness score and the organization behind the address. Never the address, never counts, never dates, never anything written. A member only searches the graphs of members they correspond with, members who share an invitation with them, and groups they have joined. Nobody can list anyone’s contacts, and searches are rate limited and logged for 30 days so that misuse can be found.
Who can join
Only someone with a member’s connect link. A sign-in from an unknown account without one is refused and the access it granted is revoked immediately.
Leaving
On the home page you can delete any one account or everything. closegraph revokes its own access at Google and deletes what it indexed at once. Every open session for the account ends at the same moment.
Google review
closegraph is under Google’s review for the permission it uses. Until that completes, Google shows an “unverified app” screen at sign-in. The review checks the privacy policy, the scopes requested, and a recorded demonstration of how the data is used, and is followed by an independent security assessment.
Reporting a problem
Nick Soman, [email protected]. A report about a security weakness is answered within a day.