New ideaProductivity SaaS
Read-Only Inbox Triage
A web service that connects a Google or Microsoft mailbox using only gmail.readonly or Mail.Read, so the token cannot send, move or delete mail even if the code has a bug.
Summary
BriefingSelf-reported
Read-only AI email triage: connects Gmail/Outlook with read-only scopes, ranks every message and sends a morning digest of the ~5 that need you, never sending, archiving or deleting. Demand is real but thin (6 HN users asked, 1 would pay, per Ravoid) while the category is hot (Fyxer $1M to $17M run-rate in 8 months, self-reported).…
Read the rest
POS 64/10093% modeled margin, but Google CASA (annual $499-$5,400) and Gmail's AI Inbox (paid Workspace, Oct 15 2026) cap the upside.
Description
A web service that connects a Google or Microsoft mailbox using only gmail.readonly or Mail.Read, so the token cannot send, move or delete mail even if the code has a bug. Messages are classified in batches by a small LLM (needs reply, task, read later, receipt, promo) with a priority, a one-line reason, any deadline and who owes whom.…
Read the rest
Only labels and reasons are stored, never bodies. Users get a morning digest of what needs them, a backlog digest after time away, and a stalled-threads list; corrections become per-sender rules. Trust is the product: zero write actions, public data-flow write-up and a delete-my-data button.
Target customer
Independent consultant or boutique-firm partner with 150-400 emails/day across work and client mailboxes, handling confidential data, refuses write-scope AI, pays for own tools ($12-$24/mo).
Pain
When I open my inbox each morning or return from time away, I want to see the few messages that need me, hidden deadlines and what was decided without me, so I can act in minutes without giving any tool power to change or send my mail.
Why this score
Why it scored lower: Feasibility HIGH: gmail.readonly is a restricted scope requiring Google verification plus annual third-party CASA ($499-$5,400/yr), several weeks, Gmail limited to test users until cleared.
Moat
Weak to moderate: provable read-only OAuth posture, no bodies at rest, CASA Letter of Validation, per-sender learned rules, Portuguese/LatAm-first localization. Native Gemini/Copilot can erode features; moat is independent, auditable positioning.
Demand signals
X posts (7 days)
n/a
Signal trend
n/a
Web demandSelf-reported
Ravoid (Oct 11 2026) counted 6 distinct HN users asking for read-only triage in 24 months, 1 would pay, from a crawl of 39,312 HN comments; models 93% gross margin at $12/mo and 48 users to break even. Ask HN 47317429 (2 pts, 4 comments) explicitly wants zero write permissions; Show HN 41943931 (12 pts) drew 'I would never trust it with full access'.…
Read the rest
r/cybersecurity thread frames AI inbox access as expanding the trust boundary. Fyxer grew $1M to $17M run-rate Jan-Aug 2025 (self-reported), Sacra est. $35M Feb 2026. SaneBox ~$5.2M revenue (LinkedIn est.), Shortwave ~$6.26M (Tracxn est.). Gmail AI Inbox rolled out to paid Workspace Oct 15 2026. CASA AL1 $499-$3,000, AL2 $5,400 per app per year (Secusy).
Market and competitors
TAM
$2.11B global AI-powered email assistant market 2025, to $2.56B 2026 and $5.46B 2030 (The Business Research Company); 4.59B email users 2025 (Radicati)
SAMEstimate
~$210M (estimate): ~10% of TAM that is triage-only, self-paid, privacy-sensitive professional spend
SOMHypothesis
~$288K ARR in 18-24 months (hypothesis): 1,500 payers x $16 blended x 12
Competitors
Gmail Gemini AI Inbox (bundled), Microsoft Copilot in Outlook, SaneBox ($5.42-$9.49/mo), Fyxer ($32-$49/mo), Shortwave ($30+/seat), Superhuman ($30-$40/mo), Emailbottle (forward-only), self-hosted gmail-triage OSS
Business model
MonetizationHypothesis
B2C/prosumer SaaS subscription, free one-time backlog digest as hook; Solo $12/mo (1 inbox), Pro $24/mo (2 inboxes + backlog digest), Team $59/mo (5 seats) per Ravoid plan; Brazil R$39-R$79/mo (hypothesis)
Revenue hypothesis (monthly)Hypothesis
~$8K MRR base / $2.4K conservative at month 12 (hypothesis)
Jobs to be done
When I open my inbox each morning or return from time away, I want to see the few messages that need me, hidden deadlines and what was decided without me, so I can act in minutes without giving any tool power to change or send my mail.
HXC
Independent consultant or boutique-firm partner with 150-400 emails/day across work and client mailboxes, handling confidential data, refuses write-scope AI, pays for own tools ($12-$24/mo).
Build and go-to-market
Tech stack
Cloudflare Workers + Cron Triggers + Queues, D1 (labels/reasons only), Gmail API gmail.readonly + Microsoft Graph Mail.Read, Claude Haiku batched classification with prompt caching, Stripe Billing, Resend for digests, WhatsApp Cloud API for Brazil digest
GTM channels
HN Show/Ask threads, Reddit r/productivity r/privacy r/sysadmin, LinkedIn content for consultants, Product Hunt, Microsoft AppSource, Google Workspace Marketplace after verification, Brazilian law/accounting communities
Risks
Main risk
Feasibility HIGH: gmail.readonly is a restricted scope requiring Google verification plus annual third-party CASA ($499-$5,400/yr), several weeks, Gmail limited to test users until cleared.
All risks
Feasibility HIGH: gmail.readonly is a restricted scope requiring Google verification plus annual third-party CASA ($499-$5,400/yr), several weeks, Gmail limited to test users until cleared. Value: thin demand evidence and Gmail AI Inbox shipping to-dos/deadlines natively. Viability: platform bundling and low virality. Usability: low risk.
Next validation step
Unknown
Sources
- ravoid.com https://news.ycombinator.com/item?id=47317429 https://news.ycombinator.com/item?id=41943931 https://news.ycombinator.com/item?id=47195919 https://news.ycombinator.com/item?id=47790270 https://www.reddit.com/r/cybersecurity/comments/1shn91t/ai_email_access https://www.reddit.com/r/SaaS/comments/1i6cevj/need_advice_on_casa_security_assessment_for_app https://www.fyxer.com/blog/series-b-statement https://sacra.com/c/fyxer-ai/ https://linkedin.com/company/sanebox https://platform.tracxn.com/a/d/company/58dd7491e4b0dcc46c7f91a1/shortwave https://techpresso.co/reviews/best-ai-email-assistants https://www.superhuman.com/pricing https://workspaceupdates.googleblog.com/2026/10/gmails-ai-inbox-is-rolling-out-to-paid-Workspace-users.html https://blog.google/products-and-platforms/products/gmail/gmail-is-entering-the-gemini-era https://www.secusy.ai/blog/google-casa-assessment-cost https://developers.google.com/identity/protocols/oauth2/production-readiness/restricted-scope-verification https://groups.google.com/g/google-apps-script-community/c/XgsHT2Fr7u8 https://www.thebusinessresearchcompany.com/report/artificial-intelligence-ai-powered-email-assistant-global-market-report https://www.radicati.com/wp/wp-content/uploads/2024/10/Email-Market-2024-2028-Executive-Summary.pdf
email, ai, productivity, privacy, read-only, triage, saas, prosumer, casa, gmail, outlook, brazil, below-bar
Want the next one the day it is scored?
The score, the sources, the risks and the next step, by email.
Research, not investment advice. Numbers keep the label they were published with.