Privacy
Email is handled by the service for forwarding and, where enabled, failed-delivery processing. OpenPGP is optional and does not remove metadata or make the whole service anonymous.
TODO: confirm jurisdiction, publish the operator's name or pseudonym, identify the contact address, and document the actual data and logs available to the operator.
Terms
Access is invite-only and manually provisioned. The service is provided on a best-effort basis with no promise of availability, continuity, or a particular feature.
TODO: the operator must review and replace this summary with applicable terms and jurisdiction-specific language.
Abuse policy
No spam, bulk sending, account farming, abuse of shared domains, or marking forwarded messages as spam. Accounts may be disabled for abuse. Do not use aliases to create large numbers of accounts or to harm other services.
TODO: publish the abuse reporting channel and response process.
Retention and deletion
Failed deliveries may be stored when enabled in the account. No local retention period is published.
TODO: decide and document retention periods, backups, account deletion behavior, and choices available to users.
Contact
TODO: publish a working operator contact address for support, privacy questions, and abuse reports.
Incident communication
There is no public status page or incident feed. If the operator can communicate during an incident, notifications will use the private channel associated with an invitation.
TODO: decide the incident communication channel and what information can be shared.