Privacy Policy

Last updated: June 27, 2026

1. Information We Process

Depending on your configuration, ESA may process account information, tenant and user settings, mailbox connection metadata, inbound email content, outbound draft content, knowledge base content uploaded by your team, audit logs, and billing or subscription metadata.

2. Mailbox and AI Provider Data

Customers connect their own IMAP/SMTP mailbox and may provide their own AI provider API key. ESA uses these credentials to retrieve messages, draft replies, and send approved replies according to customer settings. AI provider processing is subject to the customer's provider account and provider terms.

3. Purpose of Processing

We process information to provide ESA, create and manage workspaces, authenticate users, generate draft replies, maintain audit and review queues, deliver trial and billing notices, protect the service, and respond to support requests.

4. Security

ESA is designed to encrypt stored secrets, limit tenant access by role, and avoid returning mailbox or AI key plaintext through the API. Sensitive details may be masked before model calls. No system is perfectly secure, and customers should use strong passwords, least-privilege access, and appropriate mailbox/API permissions.

5. Sharing

We do not sell customer email content. Information may be processed by infrastructure, email, payment, or AI providers necessary to operate the service, as configured by the customer or required for billing and service delivery.

6. Retention and Deletion

Retention depends on workspace settings, operational logs, legal obligations, and support needs. Customers may request deletion or export guidance by contacting us. Some records may be retained where required for security, audit, billing, or legal compliance.

7. International Use

ESA is offered online and may involve cross-border processing depending on customer location, hosting region, mailbox provider, payment provider, and AI provider. Customers are responsible for assessing their own regulatory obligations when connecting mailboxes and AI services.

8. Contact

Privacy questions or requests may be sent to admin@comnetwork.net.