Privacy and security

Unless a pipe uses Inbox mode, no message content: no bodies and no attachments. Each message is read in memory only to deliver it, then discarded. Subject lines and sender names are kept for 90 days for the Conversations page. That’s also why a held reply has to be sent again rather than released later.

• Your account’s email address and team name.
• Each pipe’s address and name, and its members’ addresses with whether they have confirmed.
• For each conversation, the contacts’ addresses, its status, who it is assigned to, any reminder, and for each message we sent: its ID, sender address and name, and subject line. Deleted after 90 days without activity.
• The activity log: sender address, recipient count, status, number of trackers removed, and time. Deleted after 30 days.
• Daily totals per pipe for the Insights charts: counts and a median reply time, no addresses. Kept up to 13 months.
• Your domains and the results of our checks of their public DNS records.
• Your plan and monthly delivery counts. Card details stay with Stripe.
• Only for pipes with Inbox mode on: full copies of messages and the team’s notes, for 30 or 90 days.

Waribox never tracks opens or clicks, and Privacy Guard removes other senders’ open-tracking pixels before your team gets their mail.

Sign-in is by emailed link, with no password to leak; the sign-in page uses a bot check. Only confirmed members receive a pipe’s mail. A message claiming to come from a member but failing its domain’s DMARC check is treated as coming from an outsider, so a forged sender can’t reply as your team.

The privacy policy has the full list, retention periods and the services we use. Questions go to privacy@waribox.app.