Email Ferret
Email Ferret is a Gmail and Google Workspace add-on that scores incoming mail, labels the AI-generated cold outreach ordinary spam filters let through, and files everything else into smart folders — all without ever storing message bodies.
What is Email Ferret?
Email Ferret is a filtering layer that sits on top of Gmail and Google Workspace and answers one narrow question about every message that arrives: was this written for you, or generated and sent to a list?
The problem it targets is not classic spam. AI-written cold outreach passes SPF, DKIM and DMARC, arrives from warmed-up domains with good reputation, and reads as though a person wrote it — so Gmail delivers it. Email Ferret ignores reputation and scores behaviour instead: whether the sender is new with no conversation history, whether the message carries sales framing and a call to action, whether it looks like one step in a timed follow-up cadence, whether the personalisation is a name dropped into a template, and whether it bears the fingerprints of known sending platforms. Apollo, Instantly and Outreach are named among the tools it recognises. More than fifteen signals feed a transparent score, and messages sitting in the ambiguous middle get a second pass from a language model before anything is labelled.
What happens next is deliberately unspectacular. Flagged mail gets a Gmail label and, if you ask for it, an archive — nothing is ever deleted and every action is reversible. Everything that survives the check is filed into more than ten smart folders (Important, Calendar, Billing, Recruiting, Updates, Finance, Socials, News, Shopping), which you can switch on or off, rename, or extend with your own routing rules. Sensitivity is adjustable per mailbox, the allowlist always wins over detection, and a one-click correction feeds back into later decisions.
Privacy is the other half of the pitch. Message bodies are analysed in memory and discarded; only subject lines and message ids are kept, encrypted with AES-256-GCM and isolated per user with row-level security. The app asks for gmail.modify, gmail.labels and userinfo.email — no permission to send, compose or reply exists at all. Setup is a Google sign-in with nothing to install, and an optional Chrome extension surfaces scores inside Gmail.
What it does
- Score every incoming Gmail message against more than 15 behavioural cold-outreach signals
- Label the AI-generated sales outreach that Gmail's own spam filter delivers
- Show the exact signals behind each score, with no black box
- Sort legitimate mail into 10+ smart folders such as Important, Calendar, Billing and Recruiting
- Archive flagged mail on request — never delete it, never modify it
- Learn from allowlist entries, blocklist entries and one-click corrections
- Run a language-model second pass on the genuinely ambiguous messages
When to use Email Ferret / When not to
A quick filter to help you decide if Email Ferret is the right fit.
When to use Email Ferret
- Founders and startup executives buried under investor, partner and vendor pitches
- Engineering leads and developers who want GitHub and CI alerts visible under the recruiter noise
- Recruiters and HR managers separating candidate mail from staffing-agency and HR-tech pitches
- Lawyers, consultants and other billable professionals whose attention is the product they sell
- Solo operators and freelancers on personal Gmail who want one cheap tool rather than a tiered suite
When not to use Email Ferret
- Anyone on Outlook, Yahoo or iCloud — Email Ferret connects to Gmail and Google Workspace only
- People wanting a one-off cleanup of an old backlog; scoring applies to incoming mail, not to what is already sitting there
- Teams that need centralised billing, an admin console or shared lists today — the team plan is still announced as coming soon
- Developers looking for an API or webhooks to build on: no public API and no developer documentation is published
- Anyone who needs a permanently free tier, since past the 14-day trial there is only the paid plan
How to use Email Ferret
A typical end-to-end flow, from setup to results.
- Open the Get Started link and create an account
- Connect your Gmail or Google Workspace mailbox through Google OAuth — one click, no password typed
- Let Email Ferret create its labels; filtering starts on the next message that arrives
- Choose which of the 10+ smart folders to enable, and add custom folders or routing rules if you want them
- Set the sensitivity threshold for that mailbox
- Decide what happens to flagged mail: label only, archive, or a daily digest
- Build the allowlist for senders you always want through, and the blocklist for those you never do
- Correct any mistake from the dashboard with the Report button — corrections feed later scoring
- Optionally install the Chrome extension to see scores and allowlist senders without leaving Gmail
- Add a payment method before day 14 if you are keeping it; reminders arrive 7, 3 and 1 day out
Pros & Cons
Pros
- One flat price, 5 USD per mailbox per month, everything included and no tiers
- Fourteen-day trial with no card required, and no automatic charge if you never add one
- Message bodies are never stored — only encrypted subject lines and message ids
- Every flag is explained signal by signal instead of simply asserted
- Nothing destructive: labelling and optional archiving only, all of it reversible
- Adds to Gmail rather than replacing it, and your existing Gmail filters still run first
- Setup is a Google sign-in, with no rules to write and nothing to install
Cons
- Gmail and Google Workspace only — no Outlook, Yahoo or iCloud
- No permanent free plan, and billing is per mailbox, so two accounts cost twice
- The team plan with centralised billing, admin dashboard and shared lists is still marked coming soon
- No public API and no developer documentation
- The vendor is barely identifiable: no registered company name, no postal address, no named founder, and a domain only registered in November 2025
- The site contradicts itself — the terms require a card for the trial while every other page says none is needed, and retention is 90 days in the privacy policy but 30 days after cancellation on the features page
- Usage claims and star ratings are unaudited, and the testimonials are non-attributable
Pricing & Plans
There is no permanent free plan. Email Ferret offers a 14-day free trial with full access and, according to its pricing pages, no credit card required. Beyond the trial, the single paid plan costs USD 5.00 per Gmail mailbox per month, each additional mailbox being billed separately. The subscription may be cancelled at any time, with access running to the end of the period already paid for.
- Free trial — 14 days
- full access to every feature
- no credit card required
- with reminders 7
- 3 and 1 day before it ends
- unlimited emails analysed
- AI spam detection
- 10+ smart folders
- automatic Gmail labelling
- allowlist and blocklist management
- custom thresholds and advanced settings
- transparent scoring
- no email body storage
- everything in the individual plan plus centralised billing
- a team admin dashboard
- shared allowlist and blocklist
- volume discounts from 5 mailboxes and priority support
- waitlist through the contact page
Data, GDPR & hosting
A consolidated view of how Email Ferret handles your data.
GDPR overview
Compliance is asserted rather than documented. The only literal reference to the GDPR anywhere on the site is a GDPR Compliant badge in the footer, repeated on every page: there is no GDPR section, no stated legal basis, no published DPA and no Article 27 EU representative. The privacy policy, last updated on 22 November 2025, does list rights that map onto GDPR ones — access, rectification, erasure, export of allowlist data, and opting out by disconnecting the account — but it never names the regulation. No data protection officer is designated and no dedicated privacy address exists: every request, deletion included, goes to the general support mailbox. The terms place the contract under United States law and the exclusive jurisdiction of United States courts, with no carve-out for EU residents.
Who owns the data?
The terms are unambiguous on ownership: you keep every right to your Gmail data and content, and you grant Email Ferret only a limited licence to access and process it for the sole purpose of running the service. The software, its features and its code remain the vendor's property. The privacy policy states that personal information is never sold, traded or rented, and that only aggregated, anonymised data — which cannot be traced back to an individual — may be shared for service improvement. Three named subprocessors touch the data: Supabase for database storage, Vercel for application hosting and Stripe for payments. Google API data is additionally bound by Google's Limited Use requirements.
Reuse rights
You can reuse your own Gmail data freely: the terms grant you all rights to it, so nothing has to be asked of the vendor. The privacy policy adds an explicit right to export your allowlist, and the terms let you request a data export before closing the account. Access can be withdrawn at any moment from either side — disconnect the mailbox inside Email Ferret, or revoke the app from your Google account settings — and filtering stops immediately. Labels already written are ordinary Gmail labels: they stay yours to keep, rename or delete. What the terms forbid is reverse-engineering the service, sharing your account credentials, and any unlawful use.
Data retention & training
Hosting summary
Email Ferret does not say where your data lives. No hosting country and no region is named anywhere on the site; only three subprocessors are, each cited without a location — Supabase for database storage, Vercel for serverless application hosting and Stripe for payments. What is described is the treatment rather than the geography: message bodies are analysed in memory and never written to a database, only subject lines and message ids are kept, everything stored is encrypted with AES-256-GCM, OAuth tokens are encrypted before persistence, Gmail passwords are never stored, and each account is isolated by row-level security. Use of Google API data is stated to follow Google's API Services User Data Policy, Limited Use requirements included. Legally, the terms place the agreement under United States law with exclusive jurisdiction in United States courts. One technical observation, not a vendor statement: the domain resolves to an IP address geolocated in the United States, on Amazon's AS16509. For an EU buyer, the absence of any declared hosting location, alongside the absence of a DPA, is the gap to raise before signing.
Things to keep in mind
Risks and trade-offs to weigh before adopting Email Ferret.
- The OAuth scope grants read access to the full content of every incoming message, privileged correspondence included — a wider reach than filtering strictly needs
- False positives are inevitable and the vendor says so: a founder writing to you personally reads exactly like a good cold email, and with archiving enabled a wanted message can leave the inbox unannounced
- Handing triage to an automation erodes the habit of checking secondary folders yourself, so the cost of a miss grows quietly over time
- The no-body-storage promise rests entirely on the vendor's word: no SOC 2, ISO 27001 or third-party audit is published
- With no registered entity, no address and no named officer anywhere on the site, there is nobody identifiable to address a dispute to
- The terms impose United States law and courts with no provision for EU residents, and cap liability at twelve months of fees or 100 USD
- A minimum age of 13 is very low for a tool that reads an entire mailbox
Setup & Integrations
Technical difficulty
Close to none. Connecting a mailbox is a Google OAuth sign-in: one click, no password typed, nothing installed on your machine, since the filtering runs server-side. There are no rules to write, no keyword lists to maintain and no training period to sit through — labels are created and the next message that arrives is scored. The site quotes setup at about a minute in its FAQ, two minutes on the features page and five on the how-it-works page. Everything beyond that, from sensitivity to active folders, routing rules and lists, is optional tuning.
Deployment
Integrations
Supported languages
Behind Email Ferret
Social
Resources
All the official URLs gathered for verification and reference.
Alternatives
Tools that compete with or complement Email Ferret.
Frequently asked questions
Which mailboxes does Email Ferret work with?
How is this different from Gmail's own spam filter?
Will it delete any of my email?
Is my email content stored?
What does it cost?
How does the free trial work?
Can I see why a message was flagged?
What if it flags something I actually wanted?
Do I have to install anything?
Is there a team plan?
Should you pick Email Ferret?
Email Ferret does one thing, on one platform, for one price, and is unusually clear about all three. It filters Gmail and Google Workspace against AI-generated cold outreach — mail that is technically legitimate, properly authenticated and therefore delivered by every reputation-based filter — and files whatever survives into smart folders. At 5 USD per mailbox per month after a 14-day trial, it is the cheapest entry in the comparison table the vendor publishes itself.
Two design choices carry the product. The first is transparency: every flag is broken down into the signals that produced it, which turns a verdict into something you can argue with. The second is restraint: it labels and optionally archives, never deletes, and holds no permission to send, compose or reply. Existing Gmail filters still run first. Message bodies are analysed in memory and thrown away, with only encrypted subject lines and ids retained.
The reservations concern the vendor rather than the product. No registered company name, no postal address and no named founder appear anywhere on the site; the domain was registered in November 2025 and first archived in January 2026, so there is no track record to lean on. GDPR compliance rests on a footer badge, with no DPA, no Article 27 representative and United States law governing the contract. The site also contradicts itself twice: on whether the trial needs a card, and on how long message logs are kept.
For an individual Gmail user drowning in automated pitches the risk is small and bounded — fourteen days, no card, nothing destructive, cancellation from the billing page. For a regulated organisation handling client correspondence, the missing paperwork weighs more than the price, and the team plan has not shipped.
- Choosing a selection results in a full page refresh.
- Opens in a new window.