Privacy Policy
We build tools that protect your data. We apply the same standards to our own data handling.
What we collect
Strictly scoped intake categories required for core product operations and billing.
- Account informationemail, name (auth & billing)
- Usage telemetryanonymized performance metrics
- Support recordsdiagnostic logs for issue resolution
What we do not collect
Architectural boundaries enforced at the protocol level. We cannot access client plaintext.
- Encrypted contentNo plaintext access (Unlike Mail)
- Data brokersWe never monetize or sell data
- AdvertisingZero trackers or targeting profiles
- AI TrainingZero model training on customer data
How we use data
Telemetry and account metadata are processed exclusively within isolated execution domains. No data crosses domain boundaries.
- Service operationsCore software runtime, zero-knowledge sync, and infrastructure health
- Account & billingCryptographic authentication, security alerts, and subscription invoices
- Statutory complianceTax records, lawful audit logs, and regulatory reporting mandates
- Threat preventionAutomated DDoS mitigation, rate-limiting, and protocol attack defense
Data retention
Data is preserved only while actively servicing your account. On account termination, cryptographic erasure is immediately triggered.
Data residency
You select your sovereign storage region. Our cloud-agnostic architecture guarantees data remains within designated legal boundaries.
Third parties
Zero non-essential vendors. All sub-processors undergo continuous security auditing and must conform to our zero-trust contracts.
Your rights
You hold sovereign ownership over your account data and identity records. Under applicable data protection frameworks (including GDPR, CCPA, and international statutory privacy mandates), you retain absolute authority to inspect, rectify, export, or permanently erase your records at any time without administrative penalty.
Data export requests generate standardized, machine-readable cryptographic archives directly within your tenant portal. Upon executing an account deletion or erasure instruction, all operational identifiers and associated billing records are cryptographically purged across our active clusters within 24 hours, followed by irreversible automated backup cycle overwrites.