This is very true, thanks for reminding us... Privacy is obviously a huge issue, if we are going to be accessing your emails, so you're right we do need to make it a bit more obvious that the service is completely secure.

We would never store any of your emails on our servers, we would only store your oauth token/secret (with Gmail) or your login details (if using another provider)..  The rules engine would be a black box where the email simply goes in one side and actions are triggered out the other side so to speak...