Privacy Policy
Last updated June 12, 2026
The short version
Mailsstone only sees the email you choose to forward to your private Mailsstone address (or upload as an import). We never connect to your inbox, we don't sell your data, and we don't run advertising trackers. You can delete your data at any time.
What we collect
- Account information — your email address, display name, and a securely hashed password.
- Forwarded email — messages you forward to your private
@mailsstone.appaddress, and messages you upload via a mailbox import (.mbox). This is the only mail we ever see; Mailsstone has no access to your mailbox itself. - Data extracted from that email — companies, roles, interview times, recruiter contact details, and application status, which together form your board.
We don't use third-party analytics or advertising trackers.
How we use your email
Forwarded messages are processed automatically to keep your board current: cleaning up the message, extracting the company, role, interview rounds, and contacts, and filing it under the right application. Part of this processing uses third-party AI providers (currently OpenAI) — relevant message content is sent to them for parsing, under terms that prohibit them from training their models on it.
We don't use your email or your job-search data for advertising, and we never sell it.
Service providers
We rely on a small set of infrastructure providers to run the service:
- Cloudflare — email routing for your private forwarding address.
- OpenAI — AI parsing of forwarded messages (as described above).
- Resend — outbound transactional email, such as account verification.
Each receives only what it needs to perform its function.
Retention & deletion
Your data is kept for as long as your account exists so your board and history stay intact. Deleting a profile permanently removes its applications, parsed emails, interview rounds, and contacts. To delete your entire account and all associated data, email us at support@mailsstone.app.
Security
All traffic is encrypted in transit (TLS). Passwords are stored only as salted hashes. Access to production systems is restricted. No system is perfectly secure — if we learn of a breach affecting your data, we'll notify you.
Your choices
- You decide what Mailsstone sees — forward less, or stop forwarding at any time.
- Forwarding rules live in your mail provider; removing them cuts off all future mail.
- Anything parsed incorrectly can be edited or deleted by hand.
Changes to this policy
If we make material changes, we'll update this page and the date above. Continued use of Mailsstone after a change means you accept the updated policy.
Contact
Questions about privacy? Email support@mailsstone.app.