Your data

Data and retention

Emails, originals, attachments, saved drafts and generated context are kept while the workspace exists. Archiving changes where an email appears; it does not erase it.

You can reopen up to 50 of your latest Ask answers in each workspace for up to 24 hours. When a new answer is saved for you in that workspace, we delete expired answers and any beyond the latest 50. Expired answers stay stored until then, but can’t be opened. Your answers are also deleted when you leave or delete the workspace, or delete your profile.

Workspace deletion removes its application data after mail routes and custom domains have been removed. Until cleanup is confirmed, deletion stays pending and receiving is paused. Shared workspaces cannot be deleted through this page.

Exports include only data you can access. The current downloads are technical data files, not a ready-to-open mail archive. Message lists alone do not include the full email or attachment bytes. Save and check every list and linked content file before deleting the workspace.

Your sign-in profile is separate from workspace data. Workspace deletion does not delete that profile or data in other workspaces. The separate profile deletion flow verifies your current password, removes eligible workspaces and then removes your sign-in profile, sessions and recovery proofs. Shared workspace membership must be resolved first.

Before erasing local data, deletion saves an off-server record containing a workspace identifier or a hash of the sign-in profile identifier. It contains no message contents. If this record cannot be saved, deletion stays pending and local data is preserved. Confirmed deletion has no cancellation step: a restore may remove data for a recorded deletion even if local cleanup was still pending. Operators must apply these records before reopening a restored service.

The mail transport keeps separate message and delivery records, including copies of the waitlist emails with the address and links they carry. Workspace deletion, or leaving the waitlist, does not erase those records or copies already delivered to another mailbox.

Invoices and the billing records behind them are kept for 10 years, as Swiss law requires, also after a workspace or profile is deleted.

Backups can contain deleted data. The configured backup policy keeps seven daily, four weekly and twelve monthly snapshots; retained snapshots are removed by scheduled maintenance. This is a snapshot selection policy, not a guaranteed deadline for erasing a particular message. Restored data must be checked against deletion records before service resumes.

The privacy notice explains who processes this data and which services are involved.