To send personalized emails from Gmail with AI, let the AI do the slow parts: research each person, write a note that could only have been written to them, and plan the follow-ups. Then you read every draft and press Send, and the email goes out from your own account, paced like a person sends mail. Follow-ups should stop the moment someone replies, bounces or opts out. That setup is for dozens of notes, not thousands. For thousands, you need a different stack, covered at the end.
Most cold-email advice is written for a different job: thousands of emails from warmed secondary domains. This guide is for a founder, recruiter or student sending 40 careful notes from their real address.
Which kind of outreach are you doing?#
There are two jobs that both get called "cold email," and they need opposite setups.
| Mass cold email | Personal outreach at founder scale | |
|---|---|---|
| Volume | Hundreds to thousands a day | Dozens a day, often fewer |
| Sender | Secondary domains, many warmed inboxes | Your real Gmail or Outlook address |
| Personalization | Merge fields, spintax, templates | A reason specific to each person |
| What wins | Volume and deliverability engineering | The note, and who it's from |
| Typical tools | Instantly, Smartlead, GMass at scale | Your inbox plus a drafting and tracking layer |
| Worst failure | Burned domains | One badly judged email under your own name |
The mass-email crowd's advice is right for their job. As of September 2026, Instantly's guide to cold email deliverability tells you to "set up secondary domains exclusively for cold outreach." It suggests up to three email accounts per domain, each sending 30 to 50 emails a day, warmed up gradually. If you plan to email 2,000 strangers a week, follow that advice and don't use your company domain.
The second job is different. An investor you researched, a hiring manager whose team you want to join, 40 customers of a competitor who posted about the same problem: these people should hear from you. A note from a founder's real address, threaded properly, with a sentence that shows you read their work, is the whole point. Sending it from hello@tryacme-mail.co through a warmed inbox throws away the one thing that makes it work.
So first decide which job you're doing. If the honest answer is "as many as possible," skip to the last section.
What should the AI do, and what shouldn't it?#
Hand the AI the slow parts:
- Finding the people. Build the list from sources you trust: a conference speaker page, a job board, a public portfolio list, your own CRM export. (For a deeper version, see how to build a B2B lead list with an AI agent.)
- Researching each person. Their recent post, their company's news, the talk they gave, the product they shipped. Keep the research next to the draft so you can check it.
- Drafting. One email per person, opening with the specific reason you're writing. Short. No "I hope this finds you well."
- Planning follow-ups. One or two, spaced days apart, each adding something new rather than "just bumping this."
Keep the Send button for yourself. The model will sometimes get a fact wrong, confuse two people with the same name, or strike the wrong tone. In a chat window that costs a regenerate. In an email under your name it costs a relationship, and there's no undo. The review costs minutes. Skipping it is where AI outreach goes badly wrong.
What are Gmail's and Outlook's sending limits in 2026?#
As of September 2026, from the providers' own help pages:
| Account | Daily limit | Notes |
|---|---|---|
| Personal Gmail | 500 emails a day | Also 500 recipients max in a single email |
| Google Workspace | 2,000 messages a day | 1,500 via mail merge; 2,000 unique external recipients a day |
| Workspace trial | 500 a day | Rises after $100 in payments; can take up to 75 days |
| Microsoft 365 (Exchange Online) | 10,000 recipients a day | 30 messages a minute |
Google applies its limits over a rolling 24 hours, not a calendar day. Microsoft adds that Exchange Online "isn't suited to accommodate bulk-mailing scenarios."
For personal outreach, the caps are almost never the real ceiling. Reputation is. Google's sender guidelines ask every sender to keep the spam rate reported in Postmaster Tools below 0.3%, and ideally below 0.1%. In a batch of 40, one person clicking "Report spam" is 2.5% of that batch. That's why the list matters more than the limit. Everyone you write to should have an obvious reason to hear from you, and that reason should be in your first line.
Google's stricter bulk-sender rules (DMARC alignment, one-click unsubscribe for marketing mail) apply once you send more than 5,000 messages a day to Gmail addresses. If you're anywhere near that, you're doing the other job.
How should personal outreach be paced?#
A person doesn't send 40 emails in 40 seconds. A script does, and filters notice. Good pacing looks like this:
- One mailbox sends one message at a time, with a gap between sends that isn't a fixed metronome.
- A daily cap well below the provider's limit. Your normal day's mail counts against the same allowance.
- Business hours in the recipient's time zone. A note that lands at 3am reads as automated.
- Small first days. Google's own advice is to "start with a low sending volume to engaged users, and slowly increase the volume over time."
If you send from two addresses, say your Workspace account and a personal Gmail for student outreach, each gets its own pace and cap. They're separate reputations.
How do follow-ups land in the same thread?#
A follow-up that arrives as a new conversation looks like a mail merge. One that sits under your first email looks like a person nudging their own message. The mechanics differ by provider:
- Gmail. A reply threads when it carries the
threadIdof the original (for the Gmail API) and theIn-Reply-ToandReferencesheaders naming the original's Message-ID. One gotcha if you build this yourself: Gmail can replace the Message-ID you set on a raw send. Read the ID back from the Sent copy, or your follow-up'sIn-Reply-Towill point at an ID the recipient's mailbox never saw. - Outlook (Microsoft Graph). Setting custom threading headers through a JSON send is unreliable. The dependable way to reply into a conversation is
createReplyon the message you're following up, then send that draft.
Test it by sending a sequence to your own Gmail and your own Outlook address and checking that the follow-up is in the same thread on both.
When should the follow-ups stop?#
This is where most homegrown outreach does real damage. The rules:
- A real reply stops everything queued for that person. Even "not interested." Especially "not interested."
- A bounce stops it. Also stop writing to that address in any future campaign.
- An unsubscribe stops it, for every campaign from that account, not just this one.
- An out-of-office is not a reply. A vacation responder shouldn't cancel the sequence, but it shouldn't count as engagement either.
- It has to happen fast. If your tool reads your inbox once a night, someone who replied at 10am still gets your 2pm follow-up. That's the most embarrassing email in outreach: "Just circling back!" sent to someone who answered four hours ago.
One more thing to know: opens are a guess. Apple Mail Privacy Protection loads images when a message is delivered, and company and school security gateways often open the email and click every link before a person sees it. Count replies as the fact and opens as a hint.
How to send personalized emails from Gmail with AI in Universe#
Universe is a Mac app where people and AI agents work together, running on the Claude or ChatGPT account you already pay for. Email campaigns are one of the things it does, built for the personal-outreach case above.
1. Connect the mailbox you already use. Gmail and Outlook are among the accounts you connect by OAuth. Campaigns send from your own Gmail or Outlook, never from a shared sending domain.
2. Ask an agent for the plan. For example: "Find the 40 people who spoke about developer onboarding at these three conferences this year. Research each one and draft a short note about their talk, plus one follow-up." The agent can research on the web or in a Chrome browser already signed in as you (see letting an agent work on sites that need your login). The plan it writes is a file: the people, the research, the addresses, the drafts and the follow-ups, all in one place you can read and edit.
3. Review. Read the drafts, fix the facts, cut the ones that don't have a real reason behind them. Agents in Universe draft campaign emails and have no send action. Nothing is sent that a person did not press Send on.
4. Press Send. Delivery goes through your connected account, with daily caps and spacing per mailbox.
5. Watch replies come in. Universe tracks delivery, opens, clicks, replies, bounces and unsubscribes. Replies are picked up in about a minute. A reply, bounce or unsubscribe cancels that person's queued follow-ups. Opens are labelled as estimates, with machine opens (Apple Mail Privacy Protection, scanners) filtered out. When someone writes back, you can answer by hand in the campaign thread.
The same flow fits other jobs. A recruiter can write to 40 candidates about one role (see Universe for recruiting). A student can contact scholarship offices and professors from a school address (see finding and applying for scholarships with AI).
If you want the agent to have its own address rather than send as you, that's a different setup, covered in how to give an AI agent its own email address.
When should you use a real cold-email stack instead?#
Be honest with yourself here. Universe isn't the right tool if:
- You need volume. Thousands of emails a week to people who don't know you is a deliverability project. As of September 2026, Instantly and Smartlead are built for it: secondary domains, many inboxes, automated warmup. Protect your main domain and use them.
- You want mail merge inside Gmail. GMass runs from inside Gmail with Google Sheets mail merge and automatic follow-up sequences, and for bigger sends it moves delivery to inbox rotation and SMTP. If you already live in Gmail and Sheets and want merge-style campaigns, it's a mature choice.
- You want the AI to send on its own. In Universe a person presses Send, by design. If you want fully autonomous sequences, this isn't that.
- You aren't on a Mac. Universe is Mac only (Apple silicon or Intel, macOS 13 or later).
For the middle case, a few dozen notes that should come from a real person, your real address is the product. Keep the list small, the research real, the pace human and the Send button yours.
Universe is free to start. See pricing for the plans, or download it.
Questions#
- Is it safe to send cold email from my main domain?
- At high volume, no. Hundreds of unsolicited emails a day from your company domain can damage the reputation your everyday mail relies on. That's why cold-email platforms tell you to buy secondary domains. At low volume, a few dozen researched notes a day to people with a real reason to hear from you, your main address is usually the better choice, because a note from a real person is what gets read.
- How many emails can I send per day from Gmail?
- As of September 2026, Google lists 500 emails a day for a personal Gmail account. A Google Workspace account can send 2,000 messages a day, 1,500 of them through mail merge, and 500 during a trial. Limits run over a rolling 24 hours. For personal outreach the caps are rarely the problem. Your spam-complaint rate and replies are.
- Can Claude or ChatGPT send emails from my Gmail?
- They can, if you connect your Gmail to a tool that gives the model a send action. Whether it should is a separate question. For outreach to real people, the safer setup lets the AI research and draft while a person reviews and presses Send. In Universe, agents draft campaign emails and have no send action. Nothing leaves until you press Send.
- How do I stop follow-up emails when someone replies?
- Your tool has to read your inbox, match incoming mail to the threads it started, and cancel that person's queued follow-ups when a real reply arrives. Bounces and unsubscribes should cancel them too. Check how often replies are read. If it's once a day, someone who answered this morning can still get your follow-up this afternoon.
- Do email open rates still mean anything?
- Only as an estimate. Apple Mail Privacy Protection fetches images on delivery, and company security gateways often open emails and click links before a person sees them. A raw open count overstates real reads. Treat replies as the fact and opens as a hint. A good tool filters or labels machine opens.