Conduit Mail privacy & data

Conduit Mail ("Conduit Mail," "we," "us," or "our") is operated by Conduit Labs LLC

Your email address Your display name and profile photo (as provided by the identity provider)

Email messages (subject, body, headers, attachments metadata)

Device and browser information (user agent, screen size)

Usage analytics (pages visited, features used) via PostHog

Stripe receives your payment method details, billing address, and transaction information.

Provide the Service: Access and display your email (via API or IMAP), sync labels and folders, apply rules, send email (via API or SMTP), and manage your inbox.

When you use AI features (summarization, drafting, search, rules), relevant email content is sent to Anthropic's Claude API for processing via our servers.

We use PostHog to understand how the Service is used so we can improve it.

We use Sentry to detect and fix bugs.

all server-side data (account record, rules, settings, writing samples, files staged by connected applications and messages waiting to send, encrypted OAuth tokens, and encrypted IMAP/SMTP credentials) is permanently erased from our live systems when you confirm

Deleted data can remain in encrypted backups for up to 14 weeks, until those backups expire.

We keep these records for 6 years after you delete your account, as proof of what you agreed to, and then erase them.

Anthropic deletes what we send it from its systems within 30 days, with the exceptions described in Section 7

Our subprocessors process data primarily in the United States.

By using the Service, you consent to the transfer and processing of your data in the United States.

Data transferred from the EEA, United Kingdom, or Switzerland to the United States is transferred on the basis of the derogations in Article 49 GDPR

We rely on the following third-party services (subprocessors) to provide the Service: Google (Gmail API, Firebase Authentication, Cloud Firestore, Cloud Run)

You may delete your account at any time in Settings. Deletion is immediate and irreversible

Access: Request a copy of the personal data we hold about you.

Erasure: Request deletion of your personal data.

Data Portability: Request a machine-readable export of your data.

Rectification: Request correction of inaccurate personal data.

Objection: Object to processing of your personal data for certain purposes.

Restriction: Request that we limit how we use your data.

We do not sell your personal information. We do not share your personal information for cross-context behavioral advertising.