Voremail privacy notice

Last updated 21 October 2026

What we store

When you create an account, we store your recovery email, a password hash, and your requested Voremail address. When you connect a mailbox, we store its address, provider, connection settings, an encrypted provider refresh token or app password where needed, and copies of message headers and text bodies used by the unified inbox. We store your drafts, sending status, synchronization timestamps, and encrypted or hashed device and AI connection credentials. We also keep limited authentication attempt data and server access logs for security.

The web offline app and installed apps may save encrypted copies of messages and drafts on your device. The browser app's local encryption passphrase is not sent to our server. Installed apps keep their local encryption key in the device's protected credential storage. Mail held by Gmail, Outlook, or another provider remains subject to that provider's own practices.

Why and how data is used

We use these details to authenticate you, connect and synchronize the mailboxes you choose, send messages you initiate, recover your account, protect the service, and respond to support or privacy requests. Our service does not use message content for advertising or train AI models on it. If you create an AI connection, a separate read-only token lets that tool read your synchronized mail until you revoke it. The tool's own data handling terms apply when you give it access.

Data is transmitted to the relevant mail providers to perform the actions you request. Service operators with authorized access may need to inspect records to diagnose problems or handle requests. Our infrastructure and backup providers process service data to operate and protect Voremail.

Storage, retention, and deletion

We keep account data and synchronized copies while your account is active. Disconnecting a provider removes its Voremail connection and cached server messages; it does not delete mail at that provider. Deleting your Voremail account removes the account, its connected credentials, synchronized server messages, drafts, device and AI tokens, and any provisioned Voremail mailbox. The original mail in other providers is not deleted. Security logs and backups may remain until their applicable retention periods expire.

Account deletion cannot erase encrypted offline copies already saved on other devices. Remove the Voremail app data or browser site storage on each device to erase those copies. Privacy requests are kept for the time needed to respond and document the request.

Your choices

You can disconnect a mailbox, revoke an AI connection, or delete your Voremail account and data. For a copy of your data, a correction, or another privacy question, send a privacy request. We may ask you to verify your identity before disclosing account information.