Privacy policy

Effective August 17, 2026.

The short version

Hindsight is a desktop application. Your mail, calendar events, contacts, and tasks sync directly between your computer and your mail provider (Microsoft, Google, or your IMAP/CalDAV server) and are stored in a database on your own machine. Your mail never passes through our servers, and we cannot read it.

What we do collect

  • Account information. When you create a Hindsight account we store your email address and name (via our sign-in provider, Clerk), the date your trial started, and your subscription status.
  • Billing. Payments are processed by Paddle as merchant of record. Paddle collects your payment details and billing country; we receive only your subscription status, plan, and Paddle customer ID. We never see card numbers.
  • Licensing checks. The app periodically asks our server whether your subscription is active. That request carries a device token and the app version — not your mail accounts or any message content.
  • Update checks. The app checks a static update feed for new versions. Standard web server logs (IP address, user agent) apply.
  • Support email. If you write to us, we keep the correspondence.

What we deliberately do not collect

  • Message content, headers, subjects, or attachments
  • Your mail provider credentials or OAuth tokens (these stay on your device, encrypted with your operating system’s keychain)
  • Contact lists, calendars, or tasks
  • Telemetry about how you use the app — there is none in the product

Website analytics

This website uses privacy-respecting, cookie-free page analytics (aggregate page views and referrers). No advertising trackers, no cross-site identifiers.

Data processors

  • Clerk (authentication) — stores your sign-in email and name
  • Paddle (payments, merchant of record) — payment details, invoices, tax
  • Neon (database hosting) — subscription records tied to your account
  • Vercel (website hosting)
  • Resend (transactional email, e.g. trial reminders)

Retention and deletion

Delete the app and its data folder and every synced message on that machine is gone. To delete your Hindsight account and subscription records, email nick@hindsightmail.app from the account address; we complete deletion within 30 days, except invoices Paddle must retain for tax law.

Changes

If this policy changes materially, we will note it in the changelog and email account holders before it takes effect.