Privacy policy

We store your display name, email address, password hash, active sessions, messages, recipients, attachments and mailbox actions required to provide the service.

Passwords are processed with scrypt and stored only as salted hashes. Operators cannot recover the original password from the stored value.

Messages sent to external addresses are transferred to the configured SMTP provider. Incoming messages are processed by the configured mail gateway before reaching Jiboti Mail.

Mailbox data remains until you delete it or the account is removed. Expired sessions are deleted automatically, and messages left in trash may be purged after 30 days.

Jiboti Mail currently provides authenticated access, transport integration and isolated storage. It does not claim zero-access or end-to-end encryption.