Does Sabi store my passwords?

Nope! We designed Sabi so we don't have to hold your passwords at all. Gmail, Google Calendar, and most tools connect through OAuth via dedicated managed-auth platforms (the same kind billion-dollar companies use), so Sabi never sees your password and the tokens aren't stored in our database. You can revoke access from the provider at any time.

For the few apps that only offer an app password or API key, it's encrypted server-side (Supabase Vault, authenticated encryption) and never reaches your browser. And if you ever paste an API key into a chat with Sabi, our system scrubs it from the transcript before it's saved.