Trust and privacy
Your mail is the product we look after, not the product we sell.
We are paid by the businesses that use us. That is the whole business model, and it is why the rest of this page is possible.
True today
What we do, and don't do.
No ads
We are paid by the businesses that use us. There is no advertising in the product, and there never will be.
No analytics or ad scripts
This site and the app load no third-party analytics, advertising or tracking scripts.
Your mail is not for sale
We do not sell your data, and we do not mine your mail to profile you.
Encryption where it is real
TLS on every web and API connection. Connected-account tokens and DKIM signing keys are encrypted at rest with AES-256-GCM.
AI is opt-in and metered
Background AI processing is off unless it is switched on, and every AI call goes through one metered path with a spending limit.
Sent is not delivered
A message is marked sent when our relay accepts it, and delivered only when the receiving server's acceptance is reported back. When we don't know, we say so.
Not yet, and we say so
Not available yet. Listed so you know where we're going.
- End-to-end encrypted mail
- Encrypted transport (STARTTLS) on inbound SMTP
- Sending from our own IP addresses, instead of through a sending partner
- A public status page
The documents
Read the details.
The policies below are the binding versions. Where this page and a policy differ, the policy wins.