Mailspring
The privacy policy and terms of service do not explicitly mention AI, machine learning, neural networks, deep learning, language models, generative AI, automated decision-making, automated systems, algorithmic processing, intelligent systems, or predictive analysis. General terms like 'analyze' and 'improve services' are used, but without specific AI terminology.
Given the absence of any explicit mention of AI, automated decision-making, or profiling, the direct user impact from AI is considered low. The policy describes standard data collection for service improvement and personalization, which does not inherently imply high AI-driven impact.
The policy does not explicitly mention using personal data for AI or machine learning training. It states data is used for 'data analysis, developing new products, identifying usage trends, and operating and expanding our business activities' and 'improve and enhance the Services and for other development, diagnostic and corrective purposes', but does not specify AI/ML training.
The policy does not explicitly mention using user interactions or Log Data for AI or machine learning training. It states Log Data is used to 'administer the Services' and 'analyze (and may engage third parties to analyze) Log Data to improve, customize and enhance our Services by expanding their features and functionality and tailoring them to our Users' needs and preferences', but does not specify AI/ML training.
The policy does not mention using public content for AI or machine learning training.
The policy does not explicitly mention sharing data with third parties for AI or machine learning training purposes. Data is shared with service providers for administering and providing services, and in business transactions, but not specifically for AI training.
The primary risk stems from the company's explicit lack of support for major privacy regulations like GDPR and CCPA, which could limit user data rights and protections. While sensitive email content is processed locally by default, the use of several third-party analytics and support partners means some personal data is shared for operational purposes.
Recommended Actions
Verify the default settings for sensitive data processing (e.g., 'thread sharing') and disable any features that send email content to their servers if not strictly necessary.
Be aware that your data rights might not be fully supported under GDPR or CCPA, and requests for data deletion or access must be made via email.
Review the privacy policies of the listed third-party data partners (e.g., Mixpanel, Google Analytics) to understand their data handling practices.