This Privacy Policy explains how Jade Email, LLC, a New York limited liability company ("Jade," "we," "us," or "our"), collects, uses, stores, and shares information when you use Jade Email. Jade Email, LLC is the controller of the personal information described here.
Jade is an email service. To provide it, we necessarily store the full content of the email in your inboxes — message bodies and attachments — on your behalf. This is core to how the service works. The sections below explain how we handle that content and your other information.
Account information. Information you provide when you create or use your account, such as your name, email address, and login credentials. If you sign in through a third-party identity provider (for example, Google), we may also receive basic profile information from that provider.
Payment information. Subscription payments are processed by Stripe. Stripe collects and handles your payment details, such as your card number and billing address; Jade does not receive or store your payment card details. We retain limited information about your subscription itself — such as your plan and subscription status — that we need to operate your account.
Email content and metadata. The content of email in your inboxes (message bodies and attachments) and associated metadata (such as sender, recipient, subject, timestamps, and information generated by the service such as categorization and read status), stored on your behalf so you can use the service.
Domain information. If you purchase or connect a domain, related configuration information needed to operate your inboxes.
Technical information. When you use Jade through the web application or a native application, we process technical information such as IP address and standard request data. If you explicitly enable push notifications, we also store the browser subscription or the app installation identifier and Apple Push Notification service device token needed to deliver them. Jade uses a small number of cookies in the web application (see Section 6).
We use the information above to:
- Provide, operate, and maintain the Jade email service, including receiving, sending, storing, organizing, and displaying your email;
- Run Jade's deterministic rules and categorization system (see Section 4);
- Deliver notifications to devices you explicitly subscribe when a matching rule requests one;
- Process payments and manage your subscription;
- Send you transactional email only — such as receipts, password resets, security alerts, and service notices. We do not send marketing email;
- Secure the service, prevent abuse, and troubleshoot problems; and
- Comply with legal obligations and enforce our Terms of Service.
Jade's rules and categorization features (including auto-unsubscribe and bounce) run on deterministic logic operated in-house by Jade. This processing does not use artificial intelligence or machine learning. The rules engine itself does not disclose email content to a third party; if you separately enable an action such as an iPhone notification, the limited encrypted delivery described below applies.
Jade lets you connect your own AI agent to your account through an MCP interface. Jade does not provide an AI agent. If you choose to connect one:
- That agent will have full access to the content of your email, including message bodies and attachments;
- Your email content will be transmitted to, and may be processed by, the AI provider that operates your agent — a third party Jade does not control; and
- The handling of your email content by that agent and its provider is governed by their terms and privacy practices, not this Policy.
Jade itself does not send your email content to any third-party AI provider. Connecting an AI agent is optional and entirely your choice.
Inside the Jade web application. The authenticated Jade web application uses only the cookies it needs to function — for example, to keep you logged in and to remember display preferences such as light or dark mode. The application does not use cookies for analytics, advertising, or third-party tracking.
Your email content and its associated metadata are stored with our cloud infrastructure provider, Amazon Web Services (AWS), on servers located in the United States. Data is encrypted at rest, and is transmitted over encrypted (TLS) connections.
For Jade for iPhone notifications, the useful preview (an inbox and subject or extracted verification code) is encrypted separately for that app installation before it is sent through Apple Push Notification service. Apple receives the device token, generic fallback alert and delivery/routing metadata, and the encrypted preview. If the phone cannot decrypt the preview, it shows only the generic alert.
Who can access your email content. No Jade personnel access the content of your email. The only exceptions are: (a) when you have specifically authorized access — for example, to help us resolve a support request you have made; and (b) rare cases where limited access is necessary to recover from a technical error that is preventing the service from working. We do not read your email for advertising, profiling, or any purpose other than operating the service for you.
No method of storage or transmission is completely secure, and we cannot guarantee absolute security. You are responsible for keeping your account credentials safe.
We do not sell your personal information. The providers we currently share information with are:
| Provider | Purpose |
|---|---|
| Amazon Web Services (AWS) | Cloud storage and infrastructure, data backups, and outbound email delivery |
| Google Cloud Platform (GCP) | Hosting of the Jade web application; web requests pass through this provider, but no Jade data is permanently stored there |
| Clerk | User authentication and account management (sign-up, sign-in, credential storage) |
| Pusher | Private real-time update delivery; receives account-scoped channel identifiers and empty invalidation events, not email content |
| Apple | Sign in with Apple authentication and optional iPhone push notification delivery; processes authentication identifiers and, for notifications, an app/device token, generic delivery metadata, and an encrypted preview |
| Stripe | Payment processing |
| Entri / IONOS | Domain purchase facilitation (Entri) and domain registration (IONOS), if you purchase a domain |
This list may change as our service providers change, and we will update this policy to reflect any material changes.
Legal requests. We may disclose information when legally required to do so — for example, in response to a valid subpoena, warrant, or court order — or where we believe disclosure is necessary to protect the rights, safety, or security of Jade, our users, or the public. It is our policy to disclose user data only when we are legally compelled, and to notify the affected user before disclosing their data unless we are legally prohibited from doing so, or in an emergency involving a risk of harm.
Email content. We retain the email in your inboxes for as long as you maintain an active account. You can delete email yourself at any time, and you can schedule deletion of your account and data at any time (see Section 10). If your subscription has been lapsed (unpaid) for one year or more, we reserve the right to permanently delete your account data and stored email.
Backups. We maintain encrypted backups of your data so it can be recovered in the event of a system failure. Backup copies are retained for up to approximately 12 months before they are purged on our normal backup rotation.
What this means for account deletion. Scheduling account deletion immediately disables service and new mail processing. By default, active account data remains recoverable for 30 days so you can restore the account; you can also choose immediate permanent deletion. Once permanent deletion begins, the data is removed from our active systems through an asynchronous cleanup process. However, residual copies may remain in encrypted backups until those backups age out of the retention cycle described above (up to approximately 12 months). Backup copies are not used except for disaster recovery and are then overwritten or deleted on the normal backup rotation.
You can access and manage your email within Jade, delete individual email at any time, and initiate account deletion directly from Settings → Account → Delete account on the web or Settings → Account → Delete Account in the iPhone app. Account deletion disables Jade immediately and normally schedules permanent deletion 30 days later; you may restore the account during that period or choose immediate permanent deletion. To exercise other rights, or if you cannot use the self-service flow, contact us at support@jade.email.
Exporting your data. You can export your email at any time by connecting a mail client to your inboxes over IMAP and downloading your messages.
Verifying your identity. The self-service deletion flow requires an authenticated Jade session and an explicit destructive confirmation. For requests made through support, we may take additional reasonable steps to verify your identity — at a minimum, confirming control of your account email address — so that no one can make such a request on your behalf without authorization.
California residents. If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA/CPRA), including the right to know what personal information we collect, the right to delete it, the right to correct it, and the right to opt out of the "sale" or "sharing" of personal information. Jade does not sell or share personal information as those terms are used in the CCPA. We will not discriminate against you for exercising your rights.
Individuals in the EEA and UK. Jade Email, LLC has no establishment in the European Union, the European Economic Area (EEA), or the United Kingdom. Jade is operated from the United States and is intended for users in the United States. We do not offer or direct our services to, market to, or otherwise target individuals in the EEA or the UK, and the fact that Jade may be technically accessible from those regions is not intended as an offering of services there. On that basis, we do not consider Jade to be subject to the EU General Data Protection Regulation (GDPR) or the UK GDPR. If you are located in the EEA or the UK and believe those laws nonetheless apply to your use of Jade, you may contact us at support@jade.email, and we will consider and respond to reasonable requests.
Jade stores and processes data in the United States. If you access Jade from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those of your country.
Jade is intended only for individuals 18 years of age or older. We do not knowingly collect personal information from anyone under 18. If we learn that we have done so, we will delete it.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or by posting notice within the service before the changes take effect.
Questions about this Privacy Policy or your information can be sent to:
Jade Email, LLC
Email: support@jade.email
Mailing address: 418 Broadway, Suite N, Albany, NY 12207, USA