A security tool you can actually check.
We're asking you to route your most sensitive emails through us. Here's exactly what that means — what we hold, what we can't see, and the lines we won't cross.
What we hold
Only the recovery and reset mail sent to your SAFE2RECOVER address, and only for as long as a decision is pending — plus a short, configurable retention afterwards so you have a record. That's it.
What we don't touch
Your normal inbox. Your passwords. The contents of your accounts. We never see them, because they never come to us.
How it's handled
Mail is encrypted in transit and at rest. Access is tightly controlled and logged. Held messages are purged on your schedule. We design for the assumption that we, too, could be a target — so we hold as little as possible, for as short a time as possible.
What we'll never do
- Sell your data, or share it with advertisers.
- Train models on your mail.
- Use dark patterns, fake urgency, or make you call to cancel.
What we can't protect — honestly
We guard account recovery. We don't stop every attack: we can't help with a device that's already fully compromised, malware on your own machine, or an account you haven't pointed at us. We'll always be straight about where the edge of our protection is, rather than imply we cover everything.