Privacy Policy
Your privacy is paramount to us. This policy explains how WaveInbox handles your data with complete transparency.
Last updated: 3 July 2025
What We Collect
WaveInbox collects minimal data necessary to provide AI-powered email composition:
- Email Content: The email body and subject line you're composing
- Website Cookies: Essential cookies for website functionality and analytics
Important: We never collect or store your FastMail login credentials. Your emails remain within your email provider at all times.
How We Process Your Data
Standard Plan
- Email content is sent to OpenAI's secure infrastructure for AI processing
- OpenAI processes your data according to their privacy policy
- Data is used solely to generate your email draft
- No human review of your email content
Premium Plan
- Email content is processed entirely within our private AI infrastructure
- Hosted on third-party cloud providers with strict security measures
- Zero data sharing with external AI services
- No human review of your email content
- Enhanced privacy and security controls
Data Retention
We prioritize minimal data retention:
- Processing Duration: Email content is retained only for the time required to generate your AI-powered draft
- Immediate Deletion: Once your draft is generated, the content is immediately deleted from our systems
- No Long-term Storage: We do not maintain copies of your emails or drafts
Cookies and Website Data
Our website uses cookies for:
- Essential website functionality
- Analytics to improve our service
- User preference storage
You can control cookie preferences through your browser settings.
Your Rights (GDPR)
As we primarily serve UK and EU users, you have the following rights:
Right to Access
Request information about what personal data we hold
Right to Rectification
Correct any inaccurate personal data
Right to Erasure
Request deletion of your personal data
Right to Object
Object to processing of your personal data
Security Measures
- Encryption in Transit: All data transmissions are encrypted using industry-standard protocols
- Minimal Access: Only authorized systems process your email content
- No Human Review: Your emails are never viewed by our team members
- Secure Infrastructure: Both our systems and third-party providers maintain high security standards
Third-Party Services
Depending on your plan, we work with:
- Standard Plan: OpenAI for AI processing (subject to their privacy policy)
- Premium Plan: Third-party cloud providers for hosting our private AI infrastructure
- Website: Analytics and cookie services for website functionality
Updates to This Policy
We may update this privacy policy occasionally. When we do:
- We'll update the "Last updated" date at the top of this page
- Significant changes will be communicated via email
- Continued use of our service constitutes acceptance of the updated policy
Contact Us
If you have questions about this privacy policy or wish to exercise your rights: