Who operates Mailbridge
Masswerk Digital operates Mailbridge. Contact eli@masswerk-digital.de about data access, correction, removal, or other privacy questions.
Why we process your information
Mailbridge lets an assistant you choose read and manage the mailboxes you connect. We use your sign-in details to identify your account, mailbox credentials to connect to providers, and permissions to control each assistant's access.
Connected mail is not used by Mailbridge for advertising, sale of mail data, or model training. Assistant providers process returned information under their own terms and the settings of your account with them.
What Mailbridge stores
- Your verified sign-in email address and identity identifier.
- Connected mailbox addresses, provider names, account labels, and encrypted passwords or renewal credentials.
- The permissions you give each assistant for each mailbox.
- Session records and operation records used to track actions and prevent duplicate changes. Operation records include identifiers, times, outcomes, and encrypted results. Small encrypted message summaries, including headers such as subject and sender, can be retained for trash previews.
Mailbridge fetches messages and attachments when requested; it does not maintain a complete inbox copy or search index. Message bodies, attachments, and draft text are handled in memory while the request is processed. Drafts are saved with the mail provider.
Where information goes
- Your mail provider receives account authentication and the searches or actions requested for that mailbox.
- The assistant you authorise receives tool results. Depending on the request, these can include mailbox addresses, folder names, message headers and bodies, attachments, and action results. The initial Yahoo use case is Claude, operated by Anthropic. The connector also supports ChatGPT, operated by OpenAI, where you explicitly grant access.
- Auth0 handles Mailbridge sign-in and assistant authorisation. Our configured tenant uses its United States region. Mailbridge does not send mailbox passwords, mailbox renewal credentials, message content, or attachments to Auth0.
- The planned hosting provider, netcup, supplies the server running Mailbridge. Masswerk Digital administers the application and its recovery copies.
Mailbridge does not give mailbox credentials to the assistant. Returned mail content is shared with that assistant service. Removing a Mailbridge connection cannot remove content already held in an assistant conversation; use that service's controls for those copies.
How long information is kept
Mailbox connections, permissions, and their operation records remain in the active database until the connection is removed. A trash preview's action expires after ten minutes; that expiry does not promise deletion of its stored summary at the same time. Your Mailbridge profile remains until it is removed by the operator.
The planned hosted backup schedule keeps server database copies for fourteen days. Recovery copies downloaded by the operator are removed manually. Removing a mailbox from the active database does not immediately erase earlier backup copies.
Your controls
In account settings, change permissions for each assistant or disconnect a mailbox. Permission changes affect future requests; an action already running may finish. Disconnecting removes that mailbox's stored credential, permissions, and associated operation records from the active database. It does not delete messages from your mail provider.
You can revoke an app password or authorisation at your mail provider. Contact Masswerk Digital to request a copy, correction, or removal of your Mailbridge profile and retained service data. Controls for provider accounts and assistant conversations are managed by those services.
Sessions and technical records
Mailbridge uses an essential signed session cookie, valid for up to eight hours, and temporary account-connection state. It does not include advertising or analytics trackers. Sign-in and mail providers can use their own cookies on their websites.
The application is configured to avoid recording mailbox credentials, message bodies, and attachments in diagnostic logs. Technical connection and error information may be processed by the server, identity service, and mail providers.
Protection and access
Hosted connections use encrypted web and mail connections. Mailbox credentials and selected operation results are encrypted in the database. The running application must be able to decrypt credentials to contact your mail provider; this is not a service in which only your device can decrypt them.
Access is invitation-only during the pilot. Each person has a separate mailbox list and separately authorises each assistant.