Data Retention Policy
Last updated 26 September 2026Effective 26 September 2026
Our approach
We keep personal data only for as long as we need it to provide the service, keep it secure and meet our legal obligations.
Retention schedule
| Data | Where it is kept | How long |
|---|---|---|
| Email messages and attachments | Our mail servers | Until you delete them, or your account is deleted |
| Contacts, calendars and tasks | Our mail servers (CalDAV/CardDAV) | Until you delete them, or your account is deleted |
| Notes | A "Notes" folder in your mailbox | Until you delete them, or your account is deleted |
| Chat messages | Our servers | Until deleted, or your account is deleted |
| Account data, recovery email, profile | Our servers | For the life of your account |
| Session (including encrypted mailbox password) | Our servers | Until sign-out or expiry: end of browser session, or up to 30 days of inactivity if you stay signed in |
| Sign-in security logs (time, IP, device, success/failure) | Our servers | 90 days, then deleted automatically |
| Password reset codes | Our servers | 15 minutes |
| Two-step verification secret, backup code hashes, passkeys, trusted devices | Our servers | Until you remove them or delete your account |
| OpenPGP keys | Our servers (private key encrypted by you) | Until you remove them or delete your account |
| Call media | Not stored | Calls are not recorded |
| Aggregate usage statistics | Our servers | Kept in aggregated form that does not identify you |
| Support correspondence | Our mail systems | [Support retention period (to be added)] |
| Backups | Our backup systems | [Backup retention period (to be added)] |
| Offline mail copy | Your browser (IndexedDB) | Until you sign out |
Deleting your account
You can delete your account at any time in Settings → Account. This permanently deletes your mailbox and its contents and cannot be undone. Residual copies in backups are overwritten on the normal backup cycle. Before deleting, you may want to download your mail using IMAP or "Show original", or ask us for an export via the contact details on our website.
Exceptions
We may keep specific data for longer where we are legally required to, or where it is needed to establish, exercise or defend legal claims, for example evidence of serious abuse. We will keep only what is necessary and delete it when it is no longer needed.