Updated 2 March 2026
What we keep, and why
This is the plain version of our privacy policy. We don’t sell, mine or advertise on email, and we don’t train models on it.
| Data | Where it lives | How long |
|---|---|---|
| Mail fetched from your account | Memory, inside the enclave | Not stored |
| Mail received by forwarding | Encrypted storage, under your key | Until delivered, or a short limit |
| Tokens for your mailbox | Encrypted database, under your key | Until you disconnect |
| Rules and access settings | Encrypted database, under your key | Until you delete them |
| Receipts | Encrypted database, hash chained | You decide, with a default limit |
| Your account email and billing details | Our database and our payment provider | Until you delete your account |
What we do with your mail
The service reads mail inside the enclave to apply your rules, then releases only what you approved to the connection you approved. No third-party model reads it, and it isn’t used to train anything.
Who else is involved
Your mail provider hosts your mail, and we can’t change that. AWS runs the hardware. Connections you approve receive what you approved, and what they do next is covered by their own policies.
Your rights
You can export your data, revoke any access and delete your account at any time, on any plan. Mail a connection already received can’t be recalled, and we show you what each one holds, so you can ask them to delete it.
Contact
Write to privacy@permaily.com. If you’re in the EU or UK, you can also complain to your local data protection authority.