Effective Date: September 1, 2026

1. Information We Collect

None. Lacy Digital Labs does not collect, receive, store, or process your email, calendar data, contacts, credentials, usage statistics, crash reports, or analytics. There is no Lacy Digital Labs account, no sign-up, and no server of ours involved in sending, receiving, or syncing your mail.

2. Where Your Data Lives

WillisMail keeps a local copy of your mailbox and calendars so that it works offline and searches instantly. Specifically, on your device it stores:

• Mail — message headers, bodies, and attachments you have opened or that were prefetched for recent mail, in a local database and a local attachment cache.
• Calendar — events, recurrence rules, and reminders from the calendars you attach.
• Drafts and templates — the messages you are writing and the reusable templates you create.
• Preferences — layout, theme, and per-sender choices such as “always load remote images from this sender.”
• A local search index built from your mail, used only on your device.

All of this stays in the application’s data folder on your computer. It is never uploaded to, processed by, or stored on any server operated by Lacy Digital Labs. Removing an account in WillisMail deletes that account’s local mail, calendars, and credentials; uninstalling the application removes the rest.

3. Credentials, App Passwords, and Sign-in Tokens

To connect to your mail and calendar servers, WillisMail needs a credential: a password, an app-specific password, or — for providers that support it — an OAuth sign-in token. These are stored only in your operating system’s secure credential store (macOS Keychain, Windows Credential Manager, or the Linux Secret Service). They are never written to WillisMail’s database, configuration files, or logs, and they are never sent to Lacy Digital Labs. Every connection to a server uses TLS encryption; WillisMail does not offer an unencrypted mode.

4. Google Account Data (Gmail and Google Calendar)

If you sign in to a Google account, WillisMail uses Google’s OAuth 2.0 sign-in and requests only the access it needs for the features you use:

• Gmail (https://mail.google.com/) — to read, organize, and send your email over IMAP and SMTP, exactly as any desktop mail client does.
• Google Calendar (https://www.googleapis.com/auth/calendar) — requested only if you attach your Google calendar, to read and edit your events over CalDAV.
• Basic profile (openid, email) — to learn the email address you signed in with.

What WillisMail does with Google user data:

• It is used only to provide the mail and calendar features you see in the app, on your device.
• It is stored only locally, as described in Section 2; sign-in tokens are stored only in your operating system’s keychain (Section 3).
• It is never transferred to Lacy Digital Labs or to any other party, is never used for advertising, is never sold, and is never read by a human at Lacy Digital Labs. The only party that receives your Google data is Google itself, when the app talks to Google’s servers on your behalf.

WillisMail’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke WillisMail’s access at any time from your Google Account permissions page, or by signing out of or removing the account in WillisMail, which deletes the stored token and asks Google to revoke it. If you use an App Password instead of OAuth, you can revoke it at myaccount.google.com/apppasswords.

5. Network Connections WillisMail Makes

WillisMail connects only to:

• The mail servers (IMAP and SMTP) and calendar servers (CalDAV) of the accounts you add.
• The sign-in service of a provider (for example Google’s OAuth endpoints) when you choose to sign in with that provider, and to refresh that sign-in later.
• Web addresses you choose to open, such as remote images in a message you decided to load or a link you clicked — these open in your system web browser, not inside WillisMail.

Remote images in HTML email are blocked by default, because loading them can reveal to the sender that you opened a message. You decide per message or per sender whether to load them. Message content is rendered in a sandbox that cannot run scripts or contact the network on its own. WillisMail contains no automatic update check, no crash reporter, and no analytics endpoint.

6. Third-Party Services You Connect To

Your mail and calendar providers handle your data under their own privacy policies, not this one. When you send a message, it is delivered to your provider’s outgoing server and onward to the recipients you chose, as with any email client. Please refer to the provider’s policy for how they process mail on their servers:

• Apple Privacy Policy (iCloud Mail and iCloud Calendar)
• Google Privacy Policy (Gmail and Google Calendar)
• Microsoft Privacy Statement (Microsoft 365 / Outlook)
• For a server you or your organization runs (for example Mail-in-a-Box or Nextcloud), the operator of that server.

7. Telemetry and Analytics

WillisMail does not include any telemetry, analytics, or crash-reporting frameworks. We do not know who uses WillisMail, how often, with which providers, or what is in anyone’s mailbox.

8. Tracking and Advertising

WillisMail does not use cookies, tracking pixels, advertising identifiers, fingerprinting, or any other tracking technology, and it blocks the most common form of tracking in email — remote images — unless you allow them. We do not display advertisements and do not participate in any advertising network.

9. Purchases & Payment Processing

If you purchase WillisMail through the Apple App Store, Microsoft Store, or another distribution platform, that platform may collect transaction and account information as part of the purchase. That data is collected and managed by the platform, not by us; see the platform’s own privacy policy. If you buy a Linux build directly from our store, our Merchant of Record (Lemon Squeezy) and payment processor (Stripe) collect what they need to complete the sale, and Lacy Digital Labs keeps only your email address — used solely to tell you about updates to the app you bought, never for marketing, and never sold.

10. Children’s Privacy

WillisMail is a general-purpose productivity tool and is not directed at children under 13. Because it collects no personal information, we do not knowingly collect information from children.

11. Security

Because your data never leaves your device except to go to the servers you configure, the most important security measures are on your device: WillisMail requires TLS for every server connection, stores credentials only in the operating system’s keychain, renders email in a locked-down sandbox, blocks remote images by default, and never executes attachments. Please protect the device itself with a login password and full-disk encryption; the local mailbox copy is only as safe as the computer it is on.

12. Your Choices and Your Data

• See what is stored — everything is in the application’s data folder on your device; nothing is held anywhere else.
• Delete it — remove an account to delete its local mail, calendars, and credentials; uninstall WillisMail to remove all of it. Your mail on the server is unaffected.
• Revoke access — through your provider’s account settings (Section 4 for Google), or by removing the account in the app.
• Data requests — because we hold no data about you, there is nothing for us to export, correct, or erase; if you believe otherwise, contact us and we will look into it.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated effective date.

14. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Lacy Digital Labs LLC
Contact us through our support center

Apple and iCloud are trademarks of Apple Inc.; Google, Gmail, and Google Calendar are trademarks of Google LLC; Microsoft and Outlook are trademarks of Microsoft Corporation. WillisMail and Lacy Digital Labs, LLC are not affiliated with, endorsed by, or sponsored by any of them.