Privacy policy

Effective September 11, 2026. Replaces the prior policy dated August 17, 2026.

Controller: Argyle Holdings LLC, d/b/a Hindsight ("Hindsight," "we," "us")
Contact: support@hindsightmail.app
Postal address: 138 Elderwood Drive, Ebensburg, PA 15931, United States

This policy covers the Hindsight website (hindsightmail.app), waitlist, desktop app, accounts, billing, and support.

The short version

Hindsight is a local-first desktop mail, calendar, and tasks client. Your mail, calendar events, contacts, and tasks sync directly between your computer and your mail provider (Microsoft, Google, or your IMAP/CalDAV server) and are stored in a database on your machine. Your message content does not pass through our servers, and we cannot read it.

We do collect a small amount of account, billing, and operational data so we can run the waitlist, authenticate you, check your license, take payment, and answer support email. We do not sell personal information and we do not use your mail to train AI models.

1. What we collect

A. Waitlist (website)

If you join the waitlist, we collect the email address you submit and the time you signed up, so we can tell you when builds are ready. We may also see standard server logs (IP address, user agent, approximate location from IP) from our host.

B. Hindsight account

When you create an account we (via our sign-in provider) store:

Email address and name
Account identifiers from our auth provider
Trial start date and subscription / entitlement status
Device tokens used for licensing checks (not your mail content)
App version reported with license or update checks

C. Billing

Payments are processed by Paddle as merchant of record. Paddle collects payment details, billing country, and tax information. We receive subscription status, plan, renewal dates, and a Paddle customer ID. We never receive full card numbers.

D. Licensing and updates

The app periodically asks our servers whether your subscription is active and checks a static update feed. Those requests may include a device token, app version, and standard web logs (IP, user agent). They do not include mail account credentials, OAuth tokens, or message content.

E. Support

If you email us, we keep the correspondence and any files you attach (for example log files). Our support docs ask for logs that may include folder names and message counts — not message bodies. Do not paste message content into tickets unless you choose to.

F. Website analytics

The marketing site uses privacy-respecting, cookie-light or cookie-free aggregate analytics (page views and referrers). No advertising pixels and no cross-site ad identifiers. We use Plausible Analytics for aggregate page views and referrers.

G. What we deliberately do not collect

Message content, subjects, or attachments (beyond what you voluntarily paste into support)
Mail-provider passwords or OAuth tokens (these stay on your device, protected by your OS keychain / credential store)
Your contact lists, calendars, or tasks as stored by the app
Product telemetry / behavioral analytics inside the desktop app — none is built into the product today

If that changes, we will update this policy before shipping the change.

2. How we use personal data

Provide the service (account, license checks, updates) — contract
Waitlist / launch notice (email when builds are ready) — consent (signup) or legitimate interests
Billing and tax (subscription, invoices via Paddle) — contract; legal obligation
Support and abuse (tickets; stop fraud / license circumvention) — contract; legitimate interests
Improve the site (aggregate analytics) — legitimate interests
Legal (comply with law, enforce terms) — legal obligation; legitimate interests

We do not use mail content for advertising or model training (we never receive it).

3. How we share data

We share personal data only with processors who help us run Hindsight, under contracts that limit their use:

Clerk — authentication (sign-in email, name, auth identifiers)
Paddle — payments, invoices, tax (merchant of record)
Neon — database hosting for account / subscription records
Vercel — website and related hosting
Resend — transactional email (e.g. trial or waitlist notices)
Plausible Analytics — aggregate site analytics

We may also disclose data if required by law, to protect rights and safety, or as part of a merger, acquisition, or asset sale (with notice where required).

We do not sell personal information. We do not share personal information for cross-context behavioral advertising as those terms are used under the CCPA/CPRA.

Your mail provider (Microsoft, Google, etc.) processes your mail under their privacy policy when the app talks to them from your device. That processing is between you and the provider — not a disclosure by us of message content.

4. International transfers

We and some processors are in the United States or other countries. Where GDPR/UK GDPR applies and data leaves the EEA/UK, we rely on appropriate safeguards (such as Standard Contractual Clauses) offered by our processors, or another lawful transfer mechanism.

5. Retention

Waitlist email: until you ask to be removed, or we shut down the waitlist after launch notices go out (we will then delete or convert you only with a clear account/consent path).
Account and entitlement records: for the life of the account, then up to 30 days after a deletion request (longer only if we must keep a record of the request).
Support email: typically up to 24 months after the last message, unless needed longer for a dispute.
Paddle invoices / tax records: retained by Paddle (and as required by tax law) even after account deletion.
Server logs: short periods consistent with security and operations (typically under 90 days unless investigating abuse).
Local mail database: entirely on your device; delete the app data folder to remove it. We cannot remote-wipe your disk.

6. Your choices and rights

Everyone

Access or correct account info via your account page where available, or email us.
Delete your Hindsight account: email support@hindsightmail.app from the account address (or the waitlist address). We complete deletion of our account records within 30 days, except records we or Paddle must keep for law (e.g. invoices).
Unsubscribe from waitlist / launch mail via the link in the email or by writing us.
Cancel a subscription from your account page (billing continues to period end per the Terms).

EEA / UK (GDPR)

You may have rights to access, rectify, erase, restrict, object, and data portability, and to withdraw consent where we rely on consent. You may lodge a complaint with your local supervisory authority. To exercise rights, email support@hindsightmail.app.

California (CCPA/CPRA)

California residents may request to know, delete, and correct personal information we hold, and to opt out of "sale" or "sharing" — we do not sell or share as defined for ads. We will not discriminate for exercising these rights. Email support@hindsightmail.app. We will verify requests reasonably (e.g. from the account email).

7. Security

We use industry-standard measures for account and billing systems (HTTPS, access controls, processor security). Mail data at rest on your device is protected by your OS and disk setup; OAuth tokens use the OS credential store. No method is 100% secure — protect your device and provider accounts.

8. Children

Hindsight is not directed at children under 16 (or under 13 where that is the applicable U.S. standard). We do not knowingly collect their personal information. If you believe we have, contact us and we will delete it.

9. Changes

If we make material changes, we will update this page, bump the effective date, and email account holders (and waitlist members if the change affects them) before the change applies where required. Continued use after the effective date means you accept the updated policy, except where consent is required by law.

10. Contact

Privacy questions or requests: support@hindsightmail.app
Support (product help): support@hindsightmail.app