This was actually a website we prepared for investors; we weren't intending a public beta today! But the press found it, and so here we are. That's why you can't see a privacy policy.

In the absence of a written policy, we'll "treat users right" which roughly means we'll "treat users how we ourselves would want to be treated".

That's not particularly computable, so: the bodies of user's emails never leave the browser. We find email addresses in the browser, and send those back to our server to lookup. The emails themselves never touch our server.