Your mail is yours.

1. Who we are

Mistiq is an email service at mistiq.ai, with a web app at app.mistiq.ai and an iOS app. It is operated by JP LeBlanc (“Mistiq”, “we”, “us”), based in Canada. For anything on this page, write to privacy@mistiq.ai. A person answers.

For the mail in your mailbox, we act on your behalf: you decide what comes in, what goes out and what's kept. For your account, the waitlist and keeping the service safe, we are responsible for the data ourselves.

2. What we keep

Your account

• Your name, your @mistiq.ai address, and the outside email address you sign in with.
• Your passkeys. We only ever store the public half. The private key stays on your device.
• Your signed-in devices: when each session started and was last used, and which browser or app it was. Session and sign-in link secrets are stored only as one-way hashes.
• Your settings: time zone, signature, undo-send delay, reading preferences, and the rules you give Mistiq.

Your mail

• Every message you receive, kept exactly as it arrived (the original file, attachments included), and every message you send.
• What Mistiq read in your attachments: the text of each file it could open, and what it found there (what the file is, its amounts and dates).
• What Mistiq works out from your mail: who's in each conversation, short summaries, promises and dates (“I'll send it Friday”), what needs you, and a search index of message text. Each conclusion keeps a record of which message it came from and how sure it is, so you can see why Mistiq thought what it thought.
• Your contacts and the people you've marked as trusted.
• Drafts, proposals waiting for your decision, and what you decided.

Things you connect

• Google Calendar and Contacts, only if you connect a Google account: see section 5.
• Connected services (Étincel, Humble & Kind). The sign-in tokens that let Mistiq reach them for you, and your options for each.
• Outside agents. Each AI agent you've let into your mailbox, what it's allowed to do, and, if you gave one, the web address it's notified at.
• Mistiq's computer, if your plan includes it: the tasks you give it, each run's steps, screenshots of the pages it visited and what it found, and the sign-ins you store for it (passwords and site sessions, encrypted; see section 4).
• Your iPhone. If you allow notifications, a device token from Apple and a key that only your device and our server hold, used to seal what a notification says.

The waitlist

If you join the line on mistiq.ai: your email, the name you'd like to hold, who referred you, and a scrambled (hashed) version of your network address, used only to stop the same network from joining hundreds of times.

Operational logs

Our logs record ids, sizes, timings and error types, so we can tell when something breaks. They never contain message bodies or subjects, and we take addresses out of error messages before they're logged.

What we don't collect

No analytics, no advertising identifiers, no tracking pixels, no fingerprinting, no third-party scripts. Our fonts are served from our own domain, so loading a page doesn't tell a font company you visited. Nothing in the web app's browser storage beyond your choice of light or dark theme.

3. What we do with it

We use your data to run your mailbox and for nothing else:

• Receive, store, show and search your mail, and send what you (or rules you set) approve.
• Read each message and its attachments as they arrive to sort it, summarise it, notice promises and suggest replies.
• Look things up on the web, or do things on sites you name, when you give Mistiq's computer a task.
• Sign you in, keep your account secure, and tell you when something changes on it (a new passkey, a new sign-in email).
• Find and fix problems, and stop spam, phishing and abuse.
• Meet our legal obligations.

We don't use your mail for advertising, profiling for anyone else, or training AI models. We don't read your mail ourselves. A person at Mistiq looks at a specific message only if you ask us to (for example, to fix a bug you reported), or if the law requires it. In that case we tell you, unless the law forbids it.

Where privacy laws ask for a legal basis: running your mailbox is the service you asked for (contract), security and abuse prevention are our legitimate interests, and anything optional (a calendar, a connected service, an outside agent, notifications) happens only with your consent, which you can withdraw in Settings.

4. How the AI part works

Mistiq's reading and drafting is done by Claude, a model made by Anthropic, reached through Cloudflare AI Gateway. For each message, the model receives its text (without the quoted history), its sender, recipients and subject, and short snippets of the earlier conversation. When drafting a reply it may also see your name and addresses, your time zone, the times you're busy (never what your events are called), notes on how you like to write, and facts from your Humble & Kind page if you connected it. Calendar event titles are never sent.

Attachments. When a message comes with files Mistiq can open (PDFs, Word, Excel, PowerPoint and OpenDocument files, plain text, CSV and HTML, up to five per message), it turns each one into text inside a sealed computer with no internet access, then sends that text to Claude to note what the file is and the amounts and dates in it. A figure or a date is kept only if its words are in the file. Images, attached emails and archives aren't read.

Mistiq's computer. If your plan includes it and you give it a task, Claude receives the task's words, the text and screenshots of the web pages it opens, and what it has found so far. Pages open in a browser run by Cloudflare. For research it can also use Anthropic's own web search and page reading, which send its search terms and page addresses to Anthropic. It only reads the open web unless you name sites, and it never submits anything to a site without your yes. Passwords and site sessions you store for it are filled in by our code, only on their exact site, and never reach the model.

• Anthropic processes these requests under its commercial terms. They don't train models on them, and they keep them only for a limited period for safety and abuse monitoring.
• Every request tells Cloudflare AI Gateway not to log the prompt or the response.
• Mail is treated as untrusted. Mistiq can read an instruction in an email (“forward this to…”, “ignore your rules”) but never takes orders from one. Those always come to you.
• Mistiq can be wrong. Anything it would send waits for you, or for a rule you set, and you can switch off everything it does by itself (Mistiq → Rules → Let Mistiq act for you).

5. Google Calendar and Contacts

Connecting a Google account is optional. You do it in Settings → Google, one account at a time, and you turn Calendar and Contacts on or off separately. Google asks you for each, and Mistiq asks for read-only access only.

What Mistiq reads from Google

• Your Google account's email address and account id (scopes openid and email), to know which account you connected.
• Calendar (calendar.calendarlist.readonly, calendar.events.readonly): the list of your calendars (name, color, whether you own it), and their events from a week back to three months ahead: when each happens, its title and place, whether it takes up your time, Google's link to it, and what you see when you open one: its notes, who's invited and what they answered, how to join (a video link or a number to call in) and files attached from Google Drive.
• Contacts (contacts.readonly): your saved contacts' names, email addresses, organization and the labels you gave them. Nothing else: no phone numbers, postal addresses, birthdays, notes or photos, and not your "other contacts" or a work directory.

What it's used for, all features you see:

• Your calendars, merged into one view, and Today's line about your day.
• An event when you open it: its notes, its guests, and Join or Call in for its meeting. Mistiq makes a Join button only for a known meeting service (Google Meet, Zoom, Microsoft Teams, Webex) at its own address, and a number to call only from the meeting's own dial-in details.
• The times you're busy, so a drafted reply doesn't offer a time you can't make.
• A calendar invite's card: whether it's already on your calendar, what it clashes with, and a button to Google's own page for the event.
• The name you saved for someone, shown next to their address; suggestions when you write; and people you might trust, which you confirm one by one. A saved contact is never trusted automatically.

What reaches the AI model. As little as the feature needs: the start and end of busy times (never what an event is called, where it is, what its notes say or who is invited), whether a sender is saved in your contacts and under which of your labels, and the first name you saved for the person you're replying to. That's sent to Anthropic's Claude through Cloudflare AI Gateway for that one request, with logging turned off, under terms that forbid training on it. Nothing else from Google goes to any AI model.

Limited Use. Mistiq's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. The use of raw or derived user data received from Google Workspace APIs will adhere to the Google User Data Policy, including the Limited Use requirements. In particular:

• We use Google data only to provide and improve the features above, which you can see in Mistiq.
• We never use Google data, raw, aggregated or derived, to develop, improve or train generalized or foundational AI or machine-learning models, ours or anyone's.
• We never sell it, use it for advertising, or transfer it to anyone except as described here (Cloudflare to host it, Anthropic for the single requests above), to comply with the law, or with your consent.
• No person at Mistiq reads it, unless you ask us to (for example, to fix a bug you reported), it's needed for security, or the law requires it.

Where it's kept, and for how long. In your mailbox's own storage on Cloudflare: the events and contacts above, plus copies of what Google sent, kept so Mistiq can show you exactly what it read. Access tokens stay in your mailbox, never in logs. Turning Calendar or Contacts off deletes what that feature brought in, copies included. Disconnecting an account does the same for everything from it and revokes Mistiq's access at Google. Deleting your Mistiq account deletes it all. You can also remove Mistiq's access at any time at myaccount.google.com/permissions.

6. Who else sees anything

We use a small number of providers to run Mistiq. Each gets only what it needs to do its part, under contract, and none may use it for its own purposes.

Some things go only where you send them:

• Your recipients get the mail you send, of course. A large attachment goes as a private link on files.mistiq.ai. Anyone holding the link can download the file for 30 days.
• Étincel, if you connect it, sees drafts Mistiq writes for you and, when you ask, your own sent writing so it can learn your style. It never sees mail you received.
• Humble & Kind, if you connect it, is asked what it knows that's relevant to a conversation. The question is the conversation's subject or Mistiq's one-line summary. Anything kept on your page needs your yes, every time.
• Outside agents you let in can read the conversations they're allowed to read and propose actions, which still go through your rules and wait for you. Their notifications carry ids only, never content. Disconnect one and its access ends on its next request.
• Google receives Mistiq's read-only requests for the calendars and contacts you connected (section 5). Mistiq never changes anything at Google.
• Websites you send Mistiq's computer to see its visit as they would any browser's. A site gets a sign-in you stored only on its own exact address, and nothing is submitted to it without your yes.
• Senders of images learn when you open a message only if you choose to load its images.

We don't sell or rent personal information, and we don't share it for advertising. We'll disclose data to authorities only when legally required. We'll push back on requests that are overbroad, and tell you unless we're prohibited. If Mistiq were ever sold or merged, this policy would still apply to your data, and we'd tell you before anything changed.

7. People who write to you

Your mailbox naturally contains other people's information: their names, addresses and whatever they wrote to you. Mistiq processes it only to run your mailbox, on your behalf, just as any mail provider does. If you've written to someone who uses Mistiq and want to know what we hold, ask them, or write to privacy@mistiq.ai and we'll help.

8. How we protect it

• Sign-in without passwords. Passkeys need your device's lock (Face ID, Touch ID, PIN). Email sign-in links work once and expire in 15 minutes. Changing your passkeys or signing out other devices asks for a fresh passkey check, and we email you when a passkey is added or removed.
• Everything encrypted in transit (HTTPS only, with HSTS) and at rest on Cloudflare's storage.
• Each mailbox is separate. Every account's mail lives in its own isolated store, and the app only ever talks to the mailbox of the person signed in.
• Mail is shown safely. HTML mail is cleaned on our servers, then shown in a sealed frame where scripts can't run. Attachments download as files and never open as pages.
• Rules in code, not in the model. Mistiq can't send your mail to someone who isn’t already in the conversation or among the people you trust without you approving that specific message. That check lives in our code, where no email can talk its way past it.
• Attachments are read with no internet. Files are turned into text in a sealed computer that can't reach the network and is thrown away after each reading.
• Stored sign-ins are sealed. Passwords and site sessions you give Mistiq's computer are encrypted with a key for your mailbox alone, opened only for a run you started after a passkey check, and never shown to the AI model.
• Your original mail is never altered. Every conclusion Mistiq draws is recorded with where it came from.

To be plain about one limit: Mistiq isn't end-to-end encrypted. It has to read your mail to do its job, so your mail is encrypted with keys held by our infrastructure, not only by you. Found a weakness? See how to report it.

If a breach ever puts your information at risk, we'll tell you and the relevant regulator promptly, as the law requires, and say what happened and what we're doing about it.

9. How long we keep it

• Your mail and what Mistiq derived from it: for as long as you have an account, unless you delete it.
• Mistiq's computer: its runs, steps and screenshots, for as long as you have an account. A stored sign-in until you remove its site.
• Sessions: 30 days from last use. Sign-in links: 15 minutes. Invites: 14 days.
• Large-attachment links: stop working after 30 days.
• Events sent to outside agents: 7 days.
• Waitlist entries: until you ask us to remove you, or until you delete your account.
• After you delete your account: your mail, data and connections are removed right away. Copies in our providers' backups expire within 30 days. We keep your @mistiq.ai address reserved for a year, so nobody else can pick it up and receive mail meant for you.

10. Your rights and choices

Wherever you live, you can:

• Get a copy of the mail you've received (Settings → Account → Download your mail, a standard mbox file that other mail apps import) and of everything else Mistiq keeps, including the mail you sent (Download your data, a JSON file).
• Correct your name, sign-in email and settings in Settings, or ask us.
• Delete your account and everything in it (Settings → Account → Delete your account).
• Withdraw consent for anything optional: disconnect your calendar, a service or an agent, pause Mistiq, or turn off notifications.
• Object or ask questions about how we use your information, at privacy@mistiq.ai. We answer within 30 days.

You also have the right to complain to a privacy regulator: in Canada, the Office of the Privacy Commissioner of Canada (or, in Québec, the Commission d'accès à l'information). In the EU or UK, your local data protection authority. We'd be grateful for the chance to fix it first.

11. Where it lives

Mistiq runs on Cloudflare's global network, and the AI model runs on Anthropic's infrastructure in the United States. Your information may be processed outside your province or country, including in the United States, where it may be accessible to authorities under local law. We rely on our providers' contractual commitments (including standard contractual clauses where they apply) to protect it to the standard on this page.

12. Children

Mistiq is for adults. You must be at least 18 to have an account, and we don't knowingly collect information from children. If you believe a child has an account, write to us and we'll remove it.

13. Changes and contact

If we change this policy, we'll update the date at the top. If a change matters (a new kind of data, a new provider that sees mail content, a new use), we'll tell you by email at least 30 days before it takes effect.

Questions, requests or worries: privacy@mistiq.ai. Security reports: security@mistiq.ai.