Legal

Privacy Policy

Last updated: July 2026

Data Collection

Lullbox collects only the data necessary to provide email services. This includes your email address, account preferences, and encrypted email credentials. We do not scan the content of your emails for advertising purposes. All credentials are encrypted with AES-256-GCM before leaving your device.

How We Use Data

Your data is used solely to operate and improve the Lullbox service. AI features process email metadata and content only when you explicitly opt in. We never sell your personal information to third parties. Aggregate, anonymized usage statistics may be used to improve performance and reliability.

Cookies

We use essential cookies to maintain your session and authentication state. Optional analytics cookies help us understand how users interact with the platform. You can disable non-essential cookies in your browser settings at any time.

Third Parties

We integrate with third-party email providers (Gmail, Outlook, IMAP) via OAuth and standard protocols. These integrations are governed by the respective providers' privacy policies. We use Stripe for payment processing. Payment data is handled directly by Stripe and is never stored on our servers.

Your Rights

You have the right to access, correct, or delete your personal data at any time. You can export your data or request complete account deletion from your Settings panel. For GDPR-related inquiries, contact our Data Protection Officer at the email below.

Contact

If you have any questions about this Privacy Policy, please contact us at privacy@sovrinmail.com.