Aevornix Mail privacy notice
What the Aevornix Mail desktop application reads, where it keeps it, and what leaves your computer. Aevornix Mail is a local mail client: it talks to your mail server and to nobody else.
What the application holds
Everything below is on your own computer.
- Your mail
- Messages are fetched from your mail server as you read them, and your server stays the copy of record: there is no local copy of your mailbox and message bodies are not kept.
- What is kept so the application works offline
- The sender, recipients, subject, date and a short preview of recent messages, so a search still answers when there is no connection. The subject and sender of anything you have snoozed, with the time it is due back. Bodies are not included, so a word that appears only inside a message is findable on your server and not on your computer. Signing an account out deletes everything held for it.
- Your passwords
- Account credentials and sign-in tokens are encrypted with the operating system key store and written to the application data folder. They are never sent anywhere except to your own mail server or, for Microsoft sign-in, to Microsoft.
- What you create
- Notes, tasks, contacts, calendar entries, mail rules, signatures and your chosen addresses are stored on your computer in the application data folder. So are unsent messages and saved templates, in full, including any pictures pasted into them.
- What you send
- A record of each message the application has tried to send: the recipients, the time, and what your server answered. It is kept so a message that does not arrive can be explained rather than guessed at. It holds no message body.
- Junk filtering
- The junk filter scores messages on your computer. No message, sender or score is uploaded for classification.
What leaves your computer
Five destinations, and no others.
- Your mail server
- IMAP and SMTP connections carry your credentials, your messages and the actions you take on them.
- The servers a message points at, when you ask
- A message can name pictures held elsewhere. Nothing is fetched until you press Show images on that message or turn them on in Settings. When you do, those pictures are requested from whichever servers the message names, so the sender of that message can tell it was opened and roughly where from. The request carries no cookies and no account information, follows at most three redirects, gives up after ten seconds, and refuses any address inside your own computer or your own network. Loading images on one message does not turn them on for the next.
- Microsoft
- If you sign in with a Microsoft account, the sign-in and token refresh go directly to Microsoft. Aevornix is not in that exchange and never receives your password.
- Settings lookup
- When you add an account, the domain part of your address is sent to the Mozilla provider directory at autoconfig.thunderbird.net to find the server settings, and your own domain is asked for its published settings. You can skip both by entering the servers yourself.
- Nothing to Aevornix
- There is no Aevornix account, no telemetry, no analytics, no crash reporting and no advertising. The application connects to no Aevornix server on its own. The one exception is a meeting link: if you press Join on a calendar entry, your browser opens meet.aevornix.com, because you asked it to.
Choices the application makes for you
Remote images are blocked, so a sender cannot learn that you opened a message, and the reader says how many it blocked. You can load them on one message, with the button in the reader, or for every message by changing the setting; nothing is fetched until you do. When you do, the pictures are requested from whichever servers that message names, so its sender can tell it was opened, and the reader then says how many actually loaded rather than how many were asked for. Pictures carried inside a message, such as a logo in a signature, are shown without contacting anybody. Scripts are removed from message bodies before they are displayed. Messages are marked read on your server when you read them, because that is what every other client will expect.
Removing your data
Signing an account out removes what was held for it, including everything kept for offline search. Uninstalling removes the application. Your data folder is kept so that reinstalling does not cost you your notes and settings; delete the Aevornix Mail folder inside your Windows application data directory to remove it. Deleting the folder removes the stored credentials and everything named above with it. Mail held on your server is unaffected either way, and is removed through your mail provider.
Your rights and who to ask
Aevornix is an operating division of Oxford Private Studios Ltd. Because the application stores your data on your own computer and sends nothing to us, we hold no mailbox data to disclose, correct or erase. UK and EU data-protection rights still apply to any information you send us directly, such as a support enquiry. Requests go to the data-protection address on the contact page, and the supervisory authority is the Information Commissioner’s Office.