A private contact database from mailboxes you are allowed to access.
ContactVault keeps the messages on the provider and records the people already in them: names and addresses from headers, plus signature and vCard fields when you approve a deep scan.
Mail stays with the provider
Message bodies are not stored
Each field keeps the header, signature, or vCard it came from
Header scan and deep scan
Header scan reads sender and recipient metadata. Deep scan reads signatures and vCards only after content access and a separate consent. Full message bodies are not stored.
Gmail and Microsoft use their own sign-in. Yahoo, iCloud, Zoho, and other IMAP mailboxes use the provider's app-specific password or the IMAP password that provider issued. ContactVault does not show a fake provider login and does not send email.
Security
OAuth tokens and IMAP secrets are encrypted at rest. The browser never receives refresh tokens. This describes how ContactVault handles credentials — it is not a legal-compliance claim.