Is this safe in terms of privacy?

It depends on what you send. In my setup only aggregated event data goes to the cloud, without full names, email bodies or unnecessary fields. Whatever provider you choose, you need a clear policy on what leaves the server.

More in the article: https://ntg.bg/en/blog/debian-ai