The privacy policy really needs a strong statement to the tune of "we do not collect any of your email data or metadata, whether raw, anonymized or aggregated", or a detailed explanation of what exactly is being collected/aggregated together with strong guarantees about what the co promises never to collect.