Privacy

Responsibility

Cherami is operated in Quebec by Abderrahmane Gourragui, who is also responsible for the protection of personal information. Contact hello@cherami.to with privacy questions, requests, or complaints.

Information we collect

• Account information: the human approval email address, signup and account identifiers, approval and credential hashes, inbox addresses, and relevant timestamps.
• Optional signup research: your agent may tell us how you found Cherami and what you intend to use it for. We store these optional answers with the account ID and collection time. Collection is best effort and happens only when an account is created, not during credential recovery.
• Email: original incoming messages, their envelope and headers, and the bodies and attachments we prepare for retrieval. We also store outgoing submissions: recipients, content, attachments, and submission outcomes. Mail may contain information about people other than the account holder.
• Optional updates: if you select the newsletter checkbox during human approval, we collect your approval email address, consent timestamp, approval-page source, and consent wording and version. This subscription is separate from your agent’s account.
• Technical information: request and message identifiers, request URLs, network information such as IP addresses, sizes, processing states, failures, usage, and rate-limit counters. Rate-limit identities are stored as hashes.
• Support correspondence: information you send us to handle a request or investigate a problem. Feedback submitted through the API is stored as a message in our support inbox, with the account ID and original human signup email as the sender and reply address. Replies go to that human, not the agent’s inbox.

How we use it

We use account information to approve and secure access, including verifying credential replacement through your email address. We process mail to receive, store, prepare, retrieve, and send it. Technical information helps us enforce limits and troubleshoot the service. We may review sent mail to detect or investigate abuse; this does not mean every message is reviewed or an automated review program is running.

We use optional signup research to understand how people discover Cherami and what they intend to use it for. The answers come from agents, not directly from humans. We do not treat them as verified intent, a commitment about future use, or evidence for assessing trust or abuse. Agents are instructed not to guess, ask you extra questions, or include secrets or private conversation excerpts.

We do not sell your mail or use its contents for advertising. Your agent’s tools and providers handle summaries and other work under their own practices.

We use newsletter subscriptions only to send occasional Cherami product updates. Approval alone does not subscribe you: the optional checkbox is unchecked by default, and subscribing is not required to use Cherami. You can withdraw consent at any time by emailing hello@cherami.to.

Providers and processing outside Quebec

Cloudflare provides our hosting, database, private file storage, queues, and email routing and sending. It processes information needed to provide and protect those services, and its email service may scan headers, bodies, and attachments for malware, phishing, and spam.

Cloudflare and its service providers may process information outside Quebec and Canada, including in the United States, where different laws and lawful-access rules may apply. We do not guarantee storage or processing in a particular country. Our use of Cloudflare is subject to its applicable service and data-processing terms.

Sending mail also discloses it to the recipients and email providers involved in delivery. Your agent receives the information it retrieves. Deleting your Cherami copy does not remove those independent copies.

Deleting mail and accounts

Undeleted messages currently have no automatic expiry. This is not a promise of permanent storage.

Your authorized agent can permanently delete received or sent messages, or an entire inbox with its mail, attachments, and threads. There is no trash or undo. Inbox deletion frees its slot immediately, but the address is permanently retired and rejects future mail.

To delete your account, email hello@cherami.to and identify the account or inbox. We verify ownership through your original human approval address. We complete verified requests within 30 days of receipt, including deletion of ordinary request correspondence under our control. We contact you promptly if verification or a legal restriction prevents completion.

Other retention periods

• Signup research: we retain answers with the account until account deletion, or remove them earlier on request through hello@cherami.to. The logs and recovery periods below also apply.
• Sending usage: deleting sent mail does not reset its rolling 24-hour sending charge.
• Retired addresses: deleted inbox addresses remain reserved indefinitely so they cannot be reassigned. The permanent reservation contains only the address, not the former account identity.
• Deletion records: we retain minimal deletion identifiers to honor completed deletion requests through the 30-day recovery period. Inbox deletion records also include the retired address.
• Newsletter: we keep your subscription and consent record while you remain subscribed. Ask to unsubscribe or delete them through hello@cherami.to; we remove both when handling your request. The subscription belongs to your human email, not an agent account. Cleaning up an unused signup or deleting an account does not remove it. Tell us if you want both your account and subscription deleted. The logs and recovery periods below also apply.
• Signups and limits: signup and recovery attempts are cleaned up once their links and phrases have expired or been invalidated. The original account-creation signup remains associated with the account until account deletion. Rate-limit counters are removed after their short enforcement windows expire.
• Logs and recovery: Operational logs expire within up to 7 days. Deleted records may remain in recovery history for up to 30 days after removal. Recovery copies are not used for ordinary service operations. These periods do not describe copies held by mail recipients or their providers.
• Required records: narrowly limited information may be retained when required by law, including confidentiality-incident records for at least five years where applicable. This is not routine archiving of deleted mail for future review. Other support correspondence is retained only as needed to resolve the request or meet applicable legal obligations.

Protection and access

Mail storage is private. API access uses bearer credentials and account ownership checks; account credentials are stored as hashes. Website and API connections use HTTPS. Access is limited to the operator and providers as needed to operate, protect, or support the service. This is not end-to-end encrypted mail: Cherami and its infrastructure provider can process message contents.

Application logs are designed to record operational events rather than message bodies, attachments, or credentials. No safeguard removes every risk. If a confidentiality incident presents a serious risk of harm, we will make the notifications and take the measures required by law.

Your rights

You may request access to personal information held about you, correction, deletion, withdrawal of applicable consent, or make a privacy complaint through hello@cherami.to. We may verify your identity to avoid disclosing or deleting someone else’s information. Access and correction requests receive a response within 30 days of receipt, as required by applicable Quebec law.

You may also contact the Commission d’accès à l’information du Québec. Applicable legal rights and remedies are not limited by this policy.

Changes

We will update the effective date when this policy changes and bring material changes to affected people’s attention through an appropriate means.