Privacy Policy

Your mail is yours. Here's exactly how we handle it.

BouncePost is an email filtering and mail-client service. Because we process email on your behalf, we want to be plain about what we collect, why, who it's shared with, and how it's protected.

Effective June 23, 2026 · Last updated June 23, 2026

Who we are

BouncePost ("BouncePost," "we," "us") is an email service based in Arizona, USA. BouncePost filters incoming mail — rejecting junk at the mail-server level rather than silently foldering it — and provides a web inbox for reading, sending, and organizing the mail it accepts. You can reach us at [email protected].

This policy explains how we handle information for the BouncePost website and app at bouncepost.com.

Information we collect

Account information

When you create or use a BouncePost account, we collect your BouncePost email address, and any name, recovery email address, or phone number you choose to provide at sign-up.

Mailbox credentials and connection details

To read and send mail on your behalf, we store the information needed to connect to your mailbox. For mailboxes we host, that's your account password. For mailboxes you connect from another provider (such as Gmail), we store either an application-specific password or, where you sign in with Google, an OAuth refresh token issued by that provider. All such secrets are encrypted at rest and are used only to open authenticated connections to your mailbox.

Email content and metadata

BouncePost processes the messages sent to a mailbox you've connected — including senders, recipients, subjects, message bodies, and attachments — in order to filter, classify, display, and organize them. We retain review copies of filtered messages so that filtering decisions can be reviewed and corrected.

Your settings

We store the preferences you create in the product: trusted-sender and blocked-sender lists, sorting rules, signatures, and interface settings (such as theme and layout).

Technical data

We log basic technical information needed to operate the service securely, such as IP addresses (used for rate limiting and abuse prevention) and timestamps of requests.

How we use information

  • To authenticate you and connect to your mailbox.
  • To filter and classify incoming mail as trusted, legitimate, uncertain, or junk.
  • To display your mailbox and let you read, send, organize, and triage mail.
  • To apply your own rules, trusted-sender, and blocked-sender lists.
  • To operate, secure, maintain, and improve the service.

We do not sell your personal information, and we do not use the contents of your email to serve advertising.

Automated classification (AI)

To decide whether a message is junk, legitimate, or uncertain, BouncePost sends message content (such as the sender, subject, and a portion of the body) to a third-party AI provider, Anthropic, which returns a classification. This processing is used solely to filter your mail.

Content sent for classification is not used by us to build advertising profiles. We rely on our AI provider's commitments that data submitted through its API is not used to train its models.

Connecting a Google (Gmail) account

If you connect a Gmail account, you authorize BouncePost — through Google's official "Sign in with Google" OAuth flow — to access that mailbox so we can display and send mail within BouncePost. We request only the access needed to provide these features, and you can revoke that access at any time from your Google Account permissions page.

Limited Use disclosure. BouncePost's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google user data only to provide and improve the BouncePost features you use; we do not sell it; we do not use it for advertising; and we do not transfer it to others except as necessary to provide the service, comply with applicable law, or as part of a merger or acquisition with appropriate notice. We do not allow humans to read your Google data except with your explicit consent, where necessary for security or to comply with the law, or where the data has been aggregated and anonymized.

How information is shared

We share information only with service providers that help us operate BouncePost, and only as needed:

  • Anthropic — for the automated message classification described above.
  • Google — when you connect a Gmail account, to access that mailbox on your behalf.
  • Hosting and infrastructure providers — who provide the servers on which BouncePost runs.

We may also disclose information if required by law, or to protect the rights, safety, and security of our users and the service. We do not sell personal information.

Security

We protect credentials and tokens with encryption at rest, transmit data over encrypted (TLS) connections, and restrict access to systems handling your data. No method of storage or transmission is perfectly secure, but we work to protect your information using reasonable, industry-standard safeguards.

Data retention

We keep your information for as long as your account is active and as needed to provide the service. Review copies of filtered mail are retained on a rolling basis and age out over time. When you close your account or disconnect a mailbox, we delete the associated credentials and tokens, and remove stored mail copies, except where we must retain limited information to comply with the law.

Your choices

  • Access and correction — you can review and update your account information in the product.
  • Disconnect an account — you can remove any connected mailbox at any time, which deletes its stored credentials or tokens.
  • Revoke Google access — you can revoke BouncePost's access to a Gmail account from your Google Account permissions page.
  • Deletion — you can request deletion of your account and associated data by emailing [email protected].

Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA. To exercise them, contact us at the address below.

Children

BouncePost is not directed to children, and we do not knowingly collect personal information from anyone under 16. If you believe a child has provided us information, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. When we do, we'll revise the "Last updated" date above, and for material changes we'll provide a more prominent notice where appropriate.

Contact us

Questions about this policy or your data? Email [email protected].