Privacy.

Controller: [OPERATOR_NAME_REQUIRED], [STREET_REQUIRED], [POSTAL_CITY_REQUIRED]. Contact: privacy@plugmail.net.

Data processed

Account identifiers, recovery-email verification data, device public keys, security events, retention-state metadata and the message data required to transmit email. Pull & Purge is designed to remove active server copies after a verified local commit and to expire the user-encrypted recovery copy within the disclosed window.

Purposes

Providing email transport and account functions, enforcing user-selected retention, preventing abuse, securing the service, satisfying legal obligations and handling support requests.

Desktop analytics

Mail content, recipients, subjects and attachment names are excluded from product analytics. Public beta telemetry is opt-in and restricted to technical events described in the desktop settings.

Rights and contact

Requests for access, correction, deletion, restriction, portability or objection can be sent to the privacy contact. Final production wording, legal bases, recipients, international transfers and retention tables must match the completed records under legal/.