Privacy Policy

Effective August 5, 2026 · Brilliance Digital

The short version: we never store your mail. Linen syncs your mailbox directly from your provider into an encrypted database on your device. Our servers handle your account, your subscription, and your preferences; they are built so that message content cannot reach them.

What we store

• Your account. Name, email address, and a hashed password (or your OAuth identity). Device records for the devices you connect.
• Billing. Subscriptions are processed by Stripe. We keep plan and invoice status; your card number never touches our servers.
• AI credit ledger. Reserve and settle entries with token counts and timestamps: numbers only, never the text you worked with.
• Sender screening rules. Normalized addresses or domains you have accepted or blocked, so decisions follow you across devices. Never message content.
• The encrypted vault, if you opt in. Ciphertext blobs encrypted on your device with keys derived from your 12-word recovery phrase. We cannot read them, and we hold nothing that can decrypt them.
• Support conversations. Emails you send to support@linen.email.

What we never store

Message bodies, subjects, previews, attachments, contact lists, or mailbox structure. Your mailbox credentials (OAuth tokens, IMAP passwords) live in your device's platform keystore (Keychain, Credential Manager, Keystore, or Secret Service), not in our database.

AI, only on request

Nothing is sent to any AI model unless you explicitly ask. When you do, only the text you selected travels through our gateway to the model you chose, over zero-data-retention routing. We record how many tokens the request used for billing; we do not log the content. If you bring your own key, requests go to your provider under your terms.

No ads, no trackers

We do not run advertising, analytics trackers, or third-party scripts on this site. Fonts are self-hosted. The client strips every remote image from incoming mail before rendering, so senders cannot track your reading.

Sub-processors

Stripe (payments), our cloud hosting provider (encrypted account data), and, only when you invoke an AI action, the model provider you selected.

Retention and deletion

Delete your account and we remove your account rows, sender rules, and vault ciphertext within 30 days; ledger entries required for accounting are kept only as long as tax law demands. Because your mail was never here, there is nothing else to delete; your mailbox remains untouched at your provider and on your devices.

Your rights

You can request a copy of the data we hold about you, correct it, or delete it by writing to support@linen.email. We answer within 30 days.

Changes

If this policy changes in a way that matters, we will email account holders before the change takes effect. The current version always lives at this address.