What Clova keeps, and for how long

This page sums up the privacy policy in plain words. In short, Clova keeps what it needs to deliver your mail and keep your account safe, never sells any of it, and shows no advertising.

Who reads your mail

Software checks every message as it arrives, to see who sent it and to look for spam, abuse and illegal material. No person is involved in that.

No person at Clova reads your mail or opens your attachments as a matter of course. The one exception is a message flagged as abusive, as spam or as illegal, with a complaint filed about it: a person may then read that message, to decide what to do. Your mail isn't read to improve a product, to train a model, to build a profile of you, or out of curiosity.

What Clova holds

Your password

Only a hash of it, which can't be turned back into what you typed. For a passkey, only its public key, which can check a sign-in but can't make one.

Your latest sign-in

When it was, and the IP address it came from. Each sign-in replaces the one before.

Your mail

The messages, with their attachments and full headers, and what you write. Beside each message, what its delivery said, such as the sending server's IP address and the results of the SPF, DKIM and DMARC checks, for as long as you keep it. Attachments are encrypted, each under a key of its own.

Your profile

What you put in it, such as your name, your birthday and your photo, and a recovery email if you add one.

Your card

Never. You type it into Stripe's own form. Clova keeps only your subscription: which plan, monthly or yearly, when the period ends, and whether the last payment went through.

Logs

Ordinary server logs, with IP addresses in them, for keeping the service running and seeing what attacks it.

How long things are kept

Who else sees anything

• Google or Apple, if you sign in with them. They know you have an account here, and never get your mail.
• Stripe, if you pay for a plan. Your card goes to them, with your account's name, and nothing from your mailbox.
• Backblaze, which stores the backups and your attachments. Both are encrypted before they get there, so it can't read them.
• Have I Been Pwned, when you choose a password: the first five characters of a hash of it, never the password.
• Spamhaus: the IP address of each server that sends you mail, and the domain it gives.
• Gravatar: a hash of a sender's address, when Clova's server asks for their picture.
• The companies that write to you, when Clova checks their logo. They see Clova's server, never you.
• PostHog, which keeps the counts of visits to Clova's public pages, with nothing that could identify you.
• The people you write to, and the mailbox you forward to, which get the mail you send or forward to them.

Good to know

Nothing is sold

Not to anyone, not in aggregate, not ever.

No advertising, no trackers

The only cookie is the one that keeps you signed in.

What's counted

Visits to Clova's public pages, how far people get through signing up, and on these help pages, the answers to “Did this help?”. No cookie is used for it, and nothing inside your mailbox is ever counted.

When the law asks

Clova gives user data to authorities that ask for it properly, with documentation, and with a judge's authorization where the law requires one. It doesn't hand over mailboxes on an informal request.

To see what Clova holds, or have it deleted

Write to the address at the end of the privacy policy. Closing your account deletes it too.