Privacy policy

1. Data controller

The data controller is mbox (ulewicz.space), referred to as “mbox” or “we”. Contact: kontakt@mbox.ulewicz.space.

2. What data we process

Account data: username, email address, name, password (stored as a hash), settings and chosen language.

Mail data: messages, attachments, labels and contacts that you send or receive through the service. In end-to-end and zero-access modes the content is encrypted and we cannot access it.

Technical data: IP address, device and session information, and server logs needed for security and diagnostics.

3. Purposes and legal bases

Providing the email service (performance of a contract), ensuring security and preventing abuse (legitimate interest), meeting legal obligations and, if you consent, optional features such as automatic AI triage.

4. AI features

AI features use the Claude model provided by Anthropic. Content is passed to the model only when you use an AI feature or switch on automatic triage. We do not use your mail to train models. You can disable AI in settings.

5. Open tracking

A user sending a message can enable a tracking pixel and link tracking. The collected data (open time, email client, device, approximate location) is made available to the sender. The sender is responsible for informing recipients as required by applicable law, including the GDPR. The sender's own opens are not counted.

6. Recipients and hosting

We store data on servers in Germany (Hetzner, Falkenstein). We use sub-processors needed to run the service, including the AI model provider when you use AI features. We do not sell data and we do not show ads.

7. Retention

We keep account and mail data for as long as you have an account. After you delete it, we erase the data within a reasonable time, except for data we are legally required to retain.

8. Your rights

You have the right to access, rectify, erase, restrict processing of, and port your data, to object to processing, and to lodge a complaint with a supervisory authority. To exercise these rights, write to kontakt@mbox.ulewicz.space.

9. Cookies and local storage

We use only strictly necessary cookies (the sign-in session) and browser local storage (for example your theme choice). We use no advertising cookies and no third-party analytics scripts. We host our fonts ourselves.

10. Changes to this policy

We will notify you of material changes in advance, on the site or by email.