disop · Privacy policy
Privacy
Effective 2 September 2026. disop is in development and not yet available; this describes how the software is built to behave.
The short version
Your personal email and calendar never reach our servers. They go directly from your device to your own provider. What we host is the content of channels you create with us, and the email addresses of the people you invite into them.
What never reaches us
When you connect a mail account or a calendar, your device talks to that provider directly over IMAP, SMTP and CalDAV. We are not in the path, and there is no server-side copy.
- The contents, headers and attachments of your personal mail
- Your calendar events and their attendees
- Your contacts and address book
- Your mail account passwords and OAuth tokens
Account credentials are held in the operating system keychain on your own device. They are used to authenticate to your provider and are never transmitted to us.
What we do hold
Channels are the part of disop that runs on our servers, because a shared conversation has to live somewhere both people can reach.
- Channel and topic content — the messages posted in channels you or your collaborators create, and their attachments
- Membership — the email addresses of the people in each channel, and who added them
- An account record — the email addresses you have proved you control
- Delivery records — whether a message to a given address was delivered, bounced, or was marked as spam
- Operational logs — request and error logs needed to run the service, retained briefly
We do not sell any of it, we do not use it for advertising, and we do not use the contents of your messages to train machine learning models.
Mail we send on your behalf
When you post in a channel, we deliver that message as email to any member who does not have the app. This is the point of the product, and it means we send mail to people who never installed anything.
- Addresses are added one at a time by someone who typed them, in the course of ordinary correspondence. We do not buy, rent, scrape or import lists, and we do not send marketing.
- The first message any address receives from us explains why it arrived and who added them.
- Every message carries a working unsubscribe. Unsubscribing is permanent: the address goes on a suppression list checked before every send, and adding it to another channel will not undo that.
- Addresses that hard-bounce or report a message as spam are suppressed the same way.
Outbound mail is sent through Amazon Simple Email Service, which processes it solely to deliver it and to report delivery failures back to us.
What you can ask for
You can ask us for a copy of what we hold about you, ask us to correct it, or ask us to delete it, by writing to privacy@disop.co.
Two limits are worth stating plainly rather than burying. Deleting your account removes your account record and the channels you alone own, but it cannot remove your messages from other members' channels, because those are their copies of a shared conversation. And mail already delivered by email is gone for good — it sits in the recipient's mailbox, beyond anyone's reach, including ours.
Changes
If this policy changes in a way that affects what we collect or who receives it, we will say so here and date it. The commitment that personal mail stays off our servers is architectural, and is not something a future version of this page will quietly reverse.