The short version: very little, and not for long.
Kept while your account is open
- Your email address, timezone and settings.
- For each message: sender, sender domain, list id, a keyed hash of the subject, boolean characteristics, the category, and the reason.
- Your categories, rules and corrections.
- Your billing record.
Kept on a timer
- Activity log — 90 days.
- Operational logs — 30 days.
- Optional message embeddings, if you turned them on — 12 months.
- Sessions — 30 days maximum, or 14 days idle.
- A data export — available for one hour after you ask for it, and never stored.
Never kept at all
Message bodies, attachments, raw subject lines, contacts and calendars. There is no column for any of them.
Kept after you delete your account
Your subscription and invoices, for 7 years, because tax law requires financial records to be kept, and the Stripe customer that holds your billing details for the same period. Records of consent to an added mailbox, until 3 years after you agreed or a year after deletion, whichever is later. Our email provider keeps a delivery log of emails we sent you for up to 30 days. The privacy policy lists each one, and why.
Delete your account and everything else above is purged within 24 hours. Backups age out within 30 days and are never selectively restored.