OtterMail (myottermail.com) is operated by JTaurus Partners (“we”, “us”). This policy explains what we collect when you use OtterMail or visit this site, why we collect it, and the choices you have. OtterMail is in a private alpha; we will update this policy before opening an invite-only beta.
What we collect
- Account information: your name, your OtterMail address, a contact address, and sign-in records.
- Mail you send and receive: message content, attachments and headers for mail sent to or from your OtterMail addresses, plus the inboxes, labels and archive settings you create.
- Assistant access records: which AI assistants you connect, the inboxes and actions you grant them, drafts they create, your approvals, and an audit log of what they did.
- Delivery and technical data: delivery, bounce and complaint notifications, IP addresses, device and browser information, and service logs.
- Messages to us: anything you send to hello@myottermail.com.
How we use it
- To provide OtterMail: receive, store, organize, display and send your mail, and enforce the access you grant to assistants.
- To protect the service and the people you write to: detect spam, malware and abuse, suppress addresses that bounce or complain, and enforce our acceptable use policy.
- To support you and tell you about changes to your account or these terms.
We do not sell your personal information, we do not show ads, and we do not use the content of your mail for advertising.
AI assistants you connect
OtterMail does not run an AI model over your mail. When you connect an AI assistant and grant it an inbox, that assistant (and the company that provides it) receives the mail and actions you granted. Their handling of that data is governed by their own terms and privacy policy. You can revoke an assistant’s access at any time; revocation stops future access but cannot recall data the assistant already received.
Service providers
We use these providers to run OtterMail, under contracts that limit how they may use your data:
- Amazon Web Services (United States): sending and receiving email, spam and virus scanning, and storage of incoming mail.
- Supabase (United States region): application database.
- Railway: application hosting.
We may also disclose information when required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of the business, in which case this policy continues to apply.
Cookies
We use cookies needed to keep you signed in and to remember site preferences, such as pausing background motion. We do not use advertising or third-party tracking cookies.
Retention and deletion
We keep your mail and account data while your account is open, or until you delete it. Mail you archive stays available until you delete it. After you close your account we delete your data within 30 days, except where we must keep records to meet legal obligations, resolve disputes or prevent abuse. Delivery and abuse records may be kept longer to keep suppressed addresses suppressed.
Security
Mail is transmitted over encrypted connections where the other mail server supports it, and stored data is encrypted at rest. Access to production systems is limited to the people who operate OtterMail. No system is free of risk; if a breach affects your data, we will notify you as required by law.
Your choices and rights
You can access, export, correct or delete your data, and you can close your account, by emailing hello@myottermail.com from the address on your account. Depending on where you live, you may have additional rights under local law; we will honor them. OtterMail is not intended for anyone under 18.
Changes and contact
If we change this policy we will update the effective date and, for material changes, tell account holders by email before the change applies. Questions: hello@myottermail.com.