Legal

Aevornix Mail privacy notice

What the Aevornix Mail desktop application reads, where it keeps it, and what leaves your computer. Aevornix Mail is a local mail client: it talks to your mail server and to the destinations named below, and to nobody else. This notice covers Aevornix Mail up to and including 1.14.0. Calendar and contacts sync, the calendar link with Aev Schedule, Report phishing and forwarded attachments are new in 1.14.0 and are not part of earlier versions.

Site privacy Contact Aevornix

Legal

What the application holds

Everything below is on your own computer.

Your mail: Messages are fetched from your mail server as you read them, and your server stays the copy of record: there is no local copy of your mailbox and message bodies are not kept.
What is kept so the application works offline: The sender, recipients, subject, date and a short preview of recent messages, so a search still answers when there is no connection. The subject and sender of anything you have snoozed, with the time it is due back. Bodies are not included, so a word that appears only inside a message is findable on your server and not on your computer. Signing an account out deletes everything held for it.
Your passwords: Account credentials and sign-in tokens are encrypted with the operating system key store and written to the application data folder. They are never sent anywhere except to your own mail server, to the calendar and contacts server address you typed, or, for Microsoft or Google sign-in, to Microsoft or Google.
What you create: Notes, tasks, contacts, calendar entries, mail rules, signatures and your chosen addresses are stored on your computer in the application data folder. So are unsent messages and saved templates, in full, including any pictures pasted into them, and your settings, with, while an automatic reply is switched on, the addresses it has already answered. Searches you save, the widths you give the panes and the folder you last had open are kept in the application’s own storage in the same folder.
What you send: A record of each message the application has tried to send: the recipients, the time, and what your server answered. It is kept so a message that does not arrive can be explained rather than guessed at. It holds no message body.
Junk filtering: The junk filter scores messages on your computer. No message, sender or score is uploaded for classification.
Import progress: While an import of mail from another application is stopped before the end, a file in the import-journal folder of the application data folder holds a hash of each message already copied, so starting the same import again skips them. It holds no addresses, subjects or message text, and is removed when the import completes.
Calendar and contacts sync: While a CalDAV or CardDAV server is set up, a record of which entries have been synced, the changes waiting to be sent and how the last sync went. It holds no event or contact text and no password, and what it holds for an account is removed when the account is removed.
Calendar link with Aev Schedule: Once the link has been used, a record of which calendar entries have been exchanged with Aev Schedule and which were deleted, with how the last exchange went. It holds no event text.
Local applications: While the listener for other Aevornix applications on this computer is on, a file restricted to your Windows user holds its local port and a random key. It is deleted when the listener stops.
Forwarded attachments: When you forward a message, its files are copied to a folder in the Windows temporary folder so they can be attached, and removed when the forward is sent or discarded, or after seven days unless a saved draft still carries them.
Pasted pictures: A picture pasted into a message is held in the Windows temporary folder and removed after a day unless a saved draft uses it.
Opened attachments: An attachment you open is written to the Windows temporary folder so Windows can open it, and removed after a day.
Fault records: When something fails, the application writes what failed and why, with the time, to a log in the logs folder of the application data folder. An entry can include an account address or a server name taken from an error message; it never includes a message body or a password. The log is kept to 2 MB, the oldest entries giving way to new ones, and is never sent anywhere. You can attach it to a support request yourself if you choose.
If the application crashes: Electron, the framework the application is built on, writes a record of the crash to the Crashpad folder inside the application data folder. The record includes a copy of the application’s memory at that moment, which can include whatever it had open, such as a message being read. It stays on your computer: uploading is switched off, and it is never sent to us or to anyone else.

What leaves your computer

Seven destinations, and no others: your mail server, your calendar and contacts server, a phishing report address you set, the servers a message points at when you ask, Microsoft or Google for sign-in, the Mozilla provider directory, and your own domain. Aev Schedule is reached on this computer only.

Your mail server: IMAP and SMTP connections carry your credentials, your messages and the actions you take on them. Unsent messages are saved to the Drafts folder on your server as well, unless you turn that off in Settings, Sync and server.
Your calendar and contacts server: If you set up a CalDAV or CardDAV server in Settings, Accounts, your calendar entries and contacts are sent to that server and read back from it. Your password is sent only to your mail server or to the server address you typed. Nothing is synced until you set it up.
A phishing report address: If you set a report address for an account, a message you report is sent, as an attachment from that account through your own mail server, to that address and nowhere else. You are asked first. With no address set, reporting moves the message to Junk and sends nothing.
The servers a message points at, when you ask: A message can name pictures held elsewhere. Nothing is fetched until you press Show images on that message or turn them on in Settings. When you do, those pictures are requested from whichever servers the message names, so the sender of that message can tell it was opened and roughly where from. The request carries no cookies and no account information, follows at most three redirects, gives up after ten seconds, and refuses any address inside your own computer or your own network. Loading images on one message does not turn them on for the next.
Microsoft or Google: If you sign in with a Microsoft account, the sign-in and token refresh go directly to Microsoft. Google sign-in is offered only once you add a Google registration of your own in Settings, and then goes directly to Google in the same way. Aevornix is not in either exchange and never receives your password.
Settings lookup: When you add an account, the domain part of your address is sent to the Mozilla provider directory at autoconfig.thunderbird.net to find the server settings, and your own domain is asked for its published settings. You can skip both by entering the servers yourself.
Aev Schedule, on this computer: When the calendar link is on, calendar entries are exchanged with Aev Schedule at 127.0.0.1. Nothing goes over the network.
Nothing to Aevornix: There is no Aevornix account, no telemetry, no analytics and no advertising, and no crash report or fault record is sent anywhere. The application connects to no Aevornix server. The link to this notice in Settings opens it in your browser. Pressing Join on a calendar entry opens the meeting link that entry carries, in your browser. Versions up to 1.13.2 also made meet.aevornix.com links for online events, so in those versions Join can open meet.aevornix.com in your browser; 1.13.3 and later make no such links.

Choices the application makes for you

Remote images are blocked, so a sender cannot learn that you opened a message, and the reader says how many it blocked. You can load them on one message, with the button in the reader, or for every message by changing the setting; nothing is fetched until you do. When you do, the pictures are requested from whichever servers that message names, so its sender can tell it was opened, and the reader then says how many actually loaded rather than how many were asked for. Pictures carried inside a message, such as a logo in a signature, are shown without contacting anybody. Scripts are removed from message bodies before they are displayed. Messages are marked read on your server when you read them, because that is what every other client will expect.

Removing your data

Signing an account out removes what was held for it, including everything kept for offline search. Uninstalling removes the application. Your data folder is kept so that reinstalling does not cost you your notes and settings; delete the Aevornix Mail folder inside your Windows application data directory to remove it. Deleting the folder removes the stored credentials and everything named above that is kept in it. Forwarded attachments, pasted pictures and opened attachments are in the Windows temporary folder instead, and are removed on the schedules stated above. Mail held on your server, and calendar entries and contacts held on your calendar and contacts server, are unaffected either way, and are removed through those providers.

Your rights and who to ask

Aevornix is an operating division of Oxford Private Studios Ltd. Because the application stores your data on your own computer and sends nothing to us, we hold no mailbox data to disclose, correct or erase. UK and EU data-protection rights still apply to any information you send us directly, such as a support enquiry. Requests go to the data-protection address on the contact page, and the supervisory authority is the Information Commissioner’s Office.