Privacy Policy
Effective October 23, 2026
This policy explains what Mail needs to operate, how message privacy works, and the choices you have.
1. Information Mail handles
Account and security details: your assigned email address, From name, password-verification records, sign-in sessions, two-step verification and recovery state.
Email and workspace content: messages and delivery metadata, drafts, attachments, contacts, labels, filters, signatures, calendar events and private notes. We process this information to provide the features you use.
Technical and safety data: IP address and browser request details needed to operate the service, prevent abuse, troubleshoot delivery, and protect accounts. Mail also keeps limited security and administrative records.
2. How message encryption works
For an enrolled Private Mail account, supported content is encrypted on your device before storage. The private key stays with you; Mail stores encrypted copies and does not have the key needed to decrypt them. Internal encrypted delivery stores the sender manifest encrypted to the receiving mailbox and uses mailbox-specific conversation and retry identifiers. Each stored message copy has fresh encryption. The service still processes destinations during delivery and retains mailbox ownership, timestamps, sizes and other state needed to operate the inbox; traffic patterns may be correlated. Diagnostic sampling and historical backups may also retain technical data. This reduces retained metadata and does not provide anonymous routing.
Messages sent from an @svpn.com address to another @svpn.com address can be end-to-end encrypted when the recipient has Private Mail enabled. Standard email from an external sender is not end-to-end encrypted by that sender. The delivery service can read that incoming message while processing it, then encrypts the stored mailbox copy. Email sent to an external address follows ordinary email delivery and can be read by the recipient’s provider.
Older content is protected only after its migration reports complete. Private notes are encrypted separately and do not determine whether the message itself is encrypted.
3. Optional inbox intelligence
If you enable inbox intelligence, Mail sends the sender, sender name, subject, snippet and up to the first 1,800 characters of message text to an AI classification service. It uses the result to suggest Inbox or Archive and assess likely spam. You can turn this feature off in settings. It is unavailable for Private Mail accounts.
4. Images, links and notifications
Remote images in messages are blocked by default to reduce tracking. You can choose whether to show images embedded in a message. Mail confirms external links before opening them when that preference is enabled. Browser notifications and sounds are controlled by your notification settings and browser permissions.
5. How information is used and shared
Mail uses account, message and technical information to sign you in, store and deliver email, display your mailbox, provide calendar and privacy features, prevent abuse, and respond to support requests.
When you send an email, its content and recipient details are shared with the receiving email systems needed to deliver it. Mail uses service providers to host and operate the product and to support optional features such as inbox intelligence. They process information only as needed to provide those services.
6. Retention and deletion
Mail keeps account and mailbox information while your account is active. You can delete messages and request account deletion in settings. Some records may remain temporarily in backups, security logs, or delivery systems where needed for recovery, safety, or legal obligations, and are removed under the applicable retention process.
7. Your choices
You can manage message image display, link confirmation, notifications and optional inbox intelligence in settings. You can export available mailbox data and request account deletion there. Keep your recovery code safe: Mail cannot recreate it if it is lost.
8. Cookies and local storage
Mail uses a necessary sign-in cookie and stores some preferences and encrypted device-session data in your browser so the app can work. It does not use advertising cookies or cross-site ad tracking.
9. Policy updates and contact
We may update this policy as Mail changes. We will post the current version here and provide notice of material changes where appropriate. For privacy questions, contact support@svpn.com.