Draft, pending attorney review. This page is not legal advice. Do not rely on it until a lawyer has reviewed it and the reviewed text is published.
Privacy
This draft describes what Nyxbox stores for the person who signs in. It is pending attorney review.
What is stored
The desk stores a verifier for the owner password, not the password itself. It stores the authenticator secret, hashes of recovery codes, and passkeys you add. Sessions record when they were created, the IP address, and the browser or app that signed in.
Connecting a mailbox stores that mailbox’s credentials in encrypted form, so the desk can read and send mail. Synced messages are stored as copies: addresses, subject, date, body, and attachment names. Search uses blinded tokens derived from that mail. Groups, filing rules, and the block list are stored with the desk.
The iOS app, if you allow notifications, stores the device push token so a later alert can be addressed to that phone. No alert is sent until a separate Apple push key is configured. Face ID, if you turn it on, stays on the phone. The desk does not receive a face image or a biometric template.
Encryption
Mailbox secrets and message fields are encrypted before they are written. The key is wrapped by a key derived from the owner password. The site is served over HTTPS. A new sign-in asks for the password and an authenticator code or passkey. Face ID only unlocks a phone that is already signed in.
Third-party mail providers
The mail providers you connect hold the original mail and process sign-in, sending, and folder changes under their own terms. Nyxbox sends the mailbox the commands you take on the desk, such as read, send, archive, delete, and block. Those providers can see that activity on their side.
No sale of data
Nyxbox does not sell personal information. Synced mail is not used for advertising and is not shared with data brokers. The desk is for one owner. It is not a public email host.
Breach notification
If Nyxbox becomes aware of a breach of security that affects the sign-in or mail stored on the desk, it will notify you without unreasonable delay. The notice will say what is known, what was affected, and what is being done. Where a breach-notice law applies, the notice will follow that statute. This is a commitment in a draft, and a lawyer should confirm the timing and the contents before it is treated as final.
Deleting the desk
Security includes Delete the desk. That removes the stored sign-in, sessions, passkeys, mailbox credentials, synced messages, groups, and block list from Nyxbox. It signs this device out. Mail that still lives at a connected provider is not deleted there. The server password can be used to set the desk up again unless that password is changed in the host’s environment.
Contact
Contact details will be added before this draft is published.