Privacy Policy

Last updated 2026.

What we collect

Account details (name, e-mail, hashed password, two-factor secret), the content you choose to store or send, sign-in and audit records (time, IP address), and billing records held by Stripe. We do not sell data and we do not advertise.

How it is protected

Message bodies, attachments, files and form submissions are encrypted at rest with AES-256-GCM under a per-organization key; keys are wrapped by a master key held outside the database. Transport is TLS. Access by staff is limited to operations, logged, and never includes a mailbox view.

Who else sees it

Our mail rails (listed under Subprocessors) handle message delivery and see the envelope and content of mail in transit, as any mail provider does. Stripe handles payments. No other third party receives your data.

Retention and your rights

Data is kept while your account is active. You may export or erase it at any time. Erasure destroys the encryption key immediately; backups expire within 30 days. You may ask us to correct, delete or hand over your data by writing to support.

Cookies

One session cookie, strictly necessary. No tracking.