Privacy & control

Development notice. The final controller identity, subprocessors, data agreements, and legal privacy policy require completion before real customer mailboxes are enabled.

Your credentials

IMAP and SMTP credentials are encrypted using authenticated encryption, with the encryption key kept outside the database. They are never tool inputs or outputs. Disconnecting a mailbox deletes its stored credentials immediately.

Your mail

Messages are fetched on demand. No full mailbox copy or search index is stored. Message contents and attachments are treated as untrusted data. Temporary attachment processing is bounded and the production worker has no network access.

Actions and retention

Send previews expire for confirmation after ten minutes; encrypted content is purged within 24 hours. Content-free action records expire after 30 days. Technical logs are retained for seven days and encrypted backups for seven days. Account deletion revokes access and removes operational records.

Content shared with ChatGPT

Deleting your Letterbox account or disconnecting a mailbox does not delete content already shared with ChatGPT. Storage, memory, and model-improvement settings belong to ChatGPT. EU hosting of Letterbox does not imply that all processing is in the EU or that all content is excluded from training.

Permissions

Read, draft, organize, and send permissions are enforced by this application. Your provider password can have broader technical powers. Only enable the capabilities you need.