The problem
A consumer SaaS needed to turn a Gmail inbox into structured, actionable life events at scale, across multiple AI providers, without leaking a single token.
The approach
We built the pipeline on Next.js App Router with Supabase RLS: LLM classification with Zod-validated structured outputs, multi-tier scanning with concurrency controls, and Vercel AI Gateway as unified routing across five providers. Auth moved from browser-passphrase E2EE to server-side AES-256-GCM.
The outcome
Emails become structured events on 5-minute, 2-hour and daily cadences. A class of client-side key exposure is gone. Free, Plus and Pro tiers earn from day one.
A consumer SaaS needed to turn a Gmail inbox into structured, actionable life events at scale, across multiple AI providers, without leaking a single token.
Pipeline
- LLM classification with Zod-validated structured outputs
- Multi-tier scanning with concurrency controls across 5-minute, 2-hour and daily cadences
- Vercel AI Gateway as unified routing across five providers with a central model registry
- Next.js App Router with React Server Components and Supabase RLS
- PKCE-based Google OAuth
Security
We replaced a browser-passphrase E2EE model with server-side AES-256-GCM token encryption, eliminating a class of client-side key exposure vulnerabilities without changing the user experience.
5
AI providers unified
3
Scan cadences
3
SaaS tiers
Monetisation
Free, Plus and Pro tiers with scan quotas, AdSense and rewarded-ad credit top-ups. The product earns from day one instead of waiting for a pricing page.
