Your mail is yours. Here's how we keep it that way.
Rookery reads your mail only to do what you asked. Never to sell, never for ads, never to train AI.
“Where does our mail actually go?”
Where your mail goes
- Your mailSent to your own address, like support@yourcompany.com.
- RookeryYour mail provider forwards it here. Scam checks run as it lands. Each workspace is stored on its own, encrypted.
- Your teamEach person sees only the inboxes they can use.
- RookeryPicks only the text a task needs.
- AI modelsNever trained on your mail. We don't log prompts or answers. The model provider deletes them within 30 days.
- Back in RookeryAs a draft, a note or a sort, with its sources.
- A person says yesOr a kind of email you chose to let send itself, with checks and an undo.
- Rookery sends itReplies come from your Rookery address, with your own address as Reply-To.
- Your customerTheir answer comes back to your address.
The companies that help us run Rookery are listed in Privacy, under Subprocessors. We tell your owners at least 30 days before we start using a new AI provider.
“What stops someone getting in?”
How it's protected
Mail is encrypted as it travels and where it's stored.
Or a one-time email code. Sessions end after 30 days, or when you sign out.
Every email is checked as it lands. The worst wait for a person, with the reasons.
Rookery treats what's written in an email as something to read, never as instructions.
Each conversation shows who did what. Every change Rookery made says why.
Nothing goes out unless a person approves it, or you've chosen to let a kind of email send itself, with checks and an undo.
“Can my boss read my own mail?”
Who can see what
A team inbox is open to the whole team, or only the people and groups you choose. Each conversation says who can see it.
A private inbox is its owner's alone, even from owners and admins. It's never counted or named in reports.
Switch Rookery off for an inbox like hr@. Mark a conversation Confidential, and Rookery keeps it to itself.
Our tools show counts, not mail. Every look needs a reason, and shows in your Activity.
“Is the AI learning from our clients' mail?”
AI and your mail
Not by us, and not by the AI companies we work with.
A draft sees the conversation and your playbooks. Sorting sees the new email. Each task's list is in Privacy.
Our logs of AI calls record timing and cost, never the prompt or the answer.
“Do senders know when I open their email?”
Privacy, in the inbox too
Images from outside load only when you choose, so senders don't learn when you read.
Tracking pixels are taken out of the mail you receive, and never added to the mail you send.
Rookery never opens a link to find out where it goes.
What we keep, and for how long
| What | How long |
|---|---|
| Your mail, files and notes | Until you delete them. Deleted items wait in Trash for 30 days. |
| A closed workspace | Deleted within 30 days, and gone from backups up to 30 days after that. |
| Text an AI model saw | Deleted by the provider within 30 days. Text its safety checks flag can be kept for up to 2 years. |
| Our own logs | 7 days, never containing mail or prompts. |
| Export | Any time, in Settings: mail as MBOX, contacts, files and playbooks. |
| Deleting a whole workspace | An owner asks us, and a person does it. |
Where we stand
| Item | Status | Details |
|---|---|---|
| Encryption in transit and at rest | Yes | Everywhere your mail travels and is stored. |
| Passkey sign-in | Yes | With a one-time email code as the other way in. |
| Staff looks in your Activity | Yes | Every look through our admin tools, with its reason. |
| Data Processing Addendum | On request | Write to hello@userookery.com. |
| Keep your workspace's AI inside our hosting | On request | Every AI task then runs on models inside our hosting. |
| Every direct database visit in your Activity | Not yet | A few of us can reach the database directly, to keep Rookery running. Those visits aren't in your Activity yet. |
| SOC 2 | Not yet | We'll say here when an audit is booked. |
| HIPAA and a BAA | Not yet | Please don't keep health records in Rookery. |
| Choose your data region | Not yet | Data is handled across our hosting's global network. |
| Uptime promise and status page | Not yet | During early access, the Terms cover availability. |
| Delete a whole workspace yourself | Not yet | An owner asks us, and a person does it. |
Questions for a security review? Write to hello@userookery.com.