Privacy

Your mail and your account information

• Mail in your inboxes. We receive, store, prepare and send it on your behalf, as your agents direct. You decide what your agents collect, keep and send, who they correspond with, and what notice or authority their correspondents need from you. We use that mail for our own purposes only to provide and protect the service, to review sent mail to detect or investigate abuse, and to meet legal obligations. We don’t sell mail or use its contents for advertising.
• Everything else. We decide how your account information, answers to optional signup questions, technical information and support correspondence are handled. The sections below say what each contains, how we use it and how long we keep it.

Mail you exchanged with an agent

The cherami.to address you exchanged email with belongs to an agent run by one of our customers. To ask about your mail, or to see, correct or delete it, contact that customer. Writing to the address you corresponded with reaches them, as does any other contact they gave you.

The customer decides what their agent collected, what it keeps and how it’s used. We handle that mail on their behalf and use it only for the limited purposes in the section above. This doesn’t limit your legal rights and remedies.

What we collect and why

• Account information. Your verified contact email, account and inbox identifiers, your account’s link to your sign-in, its allowances and whether it can send and delete mail, hashes of your API keys, the approvals you give to connect agents, and when each of these happened. We use it to run your account and keep access to it secure.
• Optional signup questions. If you sign up by approving an agent’s connection, that agent may tell us how you found Cherami and what you plan to use it for. We keep the answers with your account and use them only to understand how people find Cherami and what they want it for, never to assess trust or abuse.
• Email. Incoming messages in full, including headers and attachments; saved drafts; and outgoing mail with its recipients, content, attachments and the result of sending it. Most of this mail concerns people other than you: your agents’ correspondents, and often your own customers or users.
• Technical information. Request and message identifiers, request URLs, network information such as IP addresses, sizes, processing states, failures, usage and rate-limit counters. We use it to enforce limits and troubleshoot.
• Support correspondence. What you send us so we can handle a request or investigate a problem. Your agent can also send us feedback through the HTTP API or the MCP server. That feedback reaches us linked to your account, and any reply from us goes to your verified email, not to your agent’s inbox.

Agents and applications you connect

Your code, your agents’ tools and their providers do the work on your mail, such as summarizing it, under their own practices. When you connect an application, the mail you ask it to retrieve goes to that application’s provider under your settings and terms there. Share only information you’re authorized and comfortable to have processed that way.

Our providers and where they process information

These providers process information for us:

• Cloudflare, on its global network, provides hosting, our database, private file storage, queues, and email routing and sending. Its email service may scan headers, bodies and attachments for malware, phishing and spam.
• Clerk handles identity and authentication in the United States: sign-in, verification emails, browser sessions and authorizing the applications you connect. We don’t send it mail bodies or attachments.
• Svix, in the United States, delivers webhook notifications once you add a webhook. It receives your webhook URL and any custom headers you set. Its notification payloads contain only identifiers (event, inbox and message IDs) and timestamps, never mail bodies, attachments, addresses or subjects. It keeps delivery history, including your receiver’s responses, for a limited period.

Your information may be processed outside Quebec and Canada, including in the United States, where different laws and lawful-access rules apply. We don’t guarantee storage or processing in any particular country.

Keeping and deleting mail

Messages and drafts you keep don’t expire. You or the agents you authorize can delete messages, drafts and inboxes:

• Messages and conversations. Deleted received messages, sent copies and conversations go to the inbox’s Trash for seven days, where you can restore them. After that, they’re deleted permanently.
• Drafts. Deleted at once, with no Trash or undo.
• Inboxes. Deleting an inbox removes it with its mail, attachments, drafts and conversations at once, with no Trash or undo, and frees its place in your inbox allowance. Its address is retired permanently and no longer receives mail.

Disconnecting an application doesn’t delete your account or its mail.

Deleting mail removes our copy only. Recipients, the providers that delivered it, and any agent or application that retrieved it keep theirs.

Deleting your account

Request deletion in Account Settings, or email hello@cherami.to naming the account or one of its inboxes. We confirm the request comes from the account’s owner, then delete the account with its inboxes, mail, drafts, API keys, connections and webhooks within 30 days of receiving the request, along with our correspondence about it. Until then, your keys and inboxes keep working.

If we need more from you to confirm the request, or the law stops us from completing it, we’ll contact you promptly.

How long we keep everything else

• Optional signup questions. The answers are kept with your account until it’s deleted, or removed sooner if you ask at hello@cherami.to.
• Sessions and connections. Clerk manages your browser sessions and the applications you authorize, which stay connected until you disconnect them. What links your sign-in and the applications you connect to your account, and those applications’ registration details, are kept until your account is deleted.
• Agent approvals. An approval to connect an agent expires six hours after you give it, and we delete its record within a day after that.
• Retired addresses. Reserved indefinitely so they can never be reassigned. The reservation holds only the address, not who owned it.
• Backups. Deleted information can remain in our recovery backups for up to 30 days. For the same period we keep a minimal record of each deletion, so deleted information stays deleted.
• Request-limit counters. Kept until their short enforcement windows end.
• Logs. Cloudflare’s operational logs are kept for up to 7 days, and Clerk’s application logs for a few days.
• Support correspondence. Kept only as long as we need it to resolve your request or meet legal obligations.
• Records the law requires. When the law requires it, we keep narrowly limited information, including records of confidentiality incidents for at least five years where that applies.

How we protect information

Mail is kept in private storage, and connections to the website and API use HTTPS. API keys are stored only as hashes, and each key reaches only its own account’s mail. Our own and our providers’ access to your information is limited to what is needed to operate, protect or support the service.

Mail isn’t end-to-end encrypted: we and our infrastructure provider can access message contents.

If a confidentiality incident presents a risk of serious harm, we make the notifications and take the measures the law requires.

Your rights and how to reach us

You can ask for access to the personal information we hold about you, have it corrected or deleted, withdraw consent where that applies, or make a privacy complaint. Email hello@cherami.to with any privacy question, request or complaint. Abderrahmane Gourragui is the person responsible for the protection of personal information.

We may verify your identity first, so we don’t disclose or delete someone else’s information. We respond to access and correction requests within 30 days of receipt, as Quebec law requires.

You can also contact the Commission d’accès à l’information du Québec. This policy doesn’t limit your legal rights and remedies.

Agreements and other requirements

If your work calls for a data-processing agreement, a SOC 2 report, storage in a particular region or handling regulated data, email hello@cherami.to with what you need and why.

Changes to this policy

When this policy changes, we publish the new version here with an updated effective date, and we let the people affected know about material changes.