Effective Date: October 30, 2026

1. Information We Collect

None. Lacy Digital Labs does not collect, receive, store, or process your email, calendar data, contacts, credentials, usage statistics, crash reports, or analytics. There is no Lacy Digital Labs account, no sign-up, and no server of ours involved in sending, receiving, or syncing your mail, calendars, or contacts.

2. Where Your Data Lives

WillisMail keeps a local copy of your mailbox, calendars, and address books so that it works offline and searches instantly. Specifically, on your device it stores:

• Mail — message headers, bodies, and attachments you have opened or that were prefetched for recent mail, in a local database and a local attachment cache.
• Calendar — events, recurrence rules, and reminders from the calendars you attach, calendars you keep only on this device, and calendars you subscribe to.
• Contacts — the contact cards in the address books you choose to use (names, email addresses, phone numbers, company, job title, postal addresses, birthdays and other dates, websites, social profiles, messaging handles, notes, and photos; see Section 5), plus the addresses WillisMail learns from mail you have sent and received, so it can suggest recipients.
• Drafts and templates — the messages you are writing and the reusable templates you create.
• Preferences — layout, theme, rules, and per-sender choices such as “always load remote images from this sender.”
• A local search index built from your mail and contacts, used only on your device.

All of this stays in the application’s data folder on your device. It is never uploaded to, processed by, or stored on any server operated by Lacy Digital Labs. Removing an account in WillisMail deletes that account’s local mail, calendars, contacts, and credentials; uninstalling the application removes the rest.

If you choose to sync your template library between computers, WillisMail stores it in a folder on one of your own mail accounts, on your provider’s server — not on ours. Exported account settings never include passwords.

3. Credentials, App Passwords, and Sign-in Tokens

To connect to your servers, WillisMail needs a credential: a password, an app-specific password, or — for Google and Microsoft — an OAuth sign-in token. These are stored only in your operating system’s secure credential store (macOS Keychain, Windows Credential Manager, or the Linux Secret Service). They are never written to WillisMail’s database, configuration files, or logs, and they are never sent to Lacy Digital Labs. On Linux, if no keyring is running and unlocked, WillisMail refuses to save a password rather than store it anywhere less safe. Every connection to a server uses TLS encryption; WillisMail does not offer an unencrypted mode.

4. Google and Microsoft Account Data

Google (Gmail, Google Workspace, and Google Calendar)

If you sign in to a Google account, WillisMail uses Google’s OAuth 2.0 sign-in and requests only the access it needs for the features you use:

• Gmail (https://mail.google.com/) — to read, organize, and send your email over IMAP and SMTP, exactly as any desktop mail client does. With the same sign-in, and only when you press Find addresses in Settings, WillisMail asks Gmail for the list of addresses you are allowed to send from.
• Google Calendar (https://www.googleapis.com/auth/calendar) — requested only if you attach your Google calendar, to read and edit your events over CalDAV.
• Basic profile (openid, email) — to learn the email address you signed in with.

What WillisMail does with Google user data:

• It is used only to provide the mail and calendar features you see in the app, on your device.
• It is stored only locally, as described in Section 2; sign-in tokens are stored only in your operating system’s keychain (Section 3).
• It is never transferred to Lacy Digital Labs or to any other party, is never used for advertising, is never sold, is never used by us to train AI models, and is never read by a human at Lacy Digital Labs. The only party that receives your Google data is Google itself, when the app talks to Google’s servers on your behalf — unless you turn on AI assistant access (Section 7) and connect an assistant, in which case that assistant receives the data you allow it, at your direction.

WillisMail’s use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke WillisMail’s access at any time from your Google Account permissions page, or by signing out of or removing the account in WillisMail, which deletes the stored token and asks Google to revoke it. If you use an App Password instead of OAuth, you can revoke it at myaccount.google.com/apppasswords.

Microsoft (Microsoft 365 and Outlook.com)

If you sign in to a Microsoft account, WillisMail uses Microsoft’s sign-in and talks to your mailbox through Microsoft Graph (graph.microsoft.com), Microsoft’s own service — the same place any mail client for that account would send your mail. It asks for mail only at first:

• Mail (Mail.ReadWrite, Mail.Send) — to read, organize, and send your email.
• Basic profile and staying signed in (openid, email, User.Read, offline_access) — to learn which mailbox you signed in to, and to keep you signed in without asking every hour.
• Outlook calendar (Calendars.ReadWrite) — requested only if you choose to add the account’s calendar. WillisMail changes an event only when you create, edit, or delete it in WillisMail. When an event you change has guests, Outlook itself emails them the invitation or update, as it does for any Outlook client; WillisMail tells you before you save.
• Outlook contacts (Contacts.ReadWrite) — requested only if you choose to use the account’s contacts (see Section 5).

Work and school accounts. Many organizations require an administrator to approve an app before their users can sign in to it. If yours does, your Microsoft 365 administrator will need to approve WillisMail for your organization once. Approving it grants WillisMail the permissions listed above for each user who signs in — on that user’s own device. It does not give Lacy Digital Labs any access to your organization’s data; we have no server that could receive it.

Microsoft account data is used, stored, and protected exactly as described above for Google data: only on your device, only for the features you see, never transferred to us or anyone else except an AI assistant you choose to connect (Section 7), never used for advertising, and never sold. Signing out of the account in WillisMail deletes the stored token. To withdraw the permissions themselves, remove WillisMail from your Microsoft account’s app permissions, or, for a work or school account, ask your administrator.

5. Contacts

WillisMail can use your contacts to suggest people as you address a message, and to show a person’s name and picture instead of a bare email address. Using an address book is optional, and WillisMail keeps working without one: recipient suggestions then come from the addresses in mail you have already sent and received.

• Apple Contacts (Mac). Off until you turn on Use Apple Contacts in Settings → Contacts, and macOS asks your permission first. WillisMail reads names and nicknames, email addresses, phone numbers, company, job title and department, postal addresses, birthdays and other dates, websites, social profiles, messaging handles, and photos. It reads notes only if Apple grants WillisMail the permission that requires; until then notes are neither read nor changed. It does not read related people. Once you allow access, contacts you add, edit, or delete in WillisMail are saved to Apple Contacts, and macOS syncs that change through your iCloud, Google, or Exchange accounts as it would any change you make in Contacts. Turn off Allow editing Apple Contacts to keep WillisMail read-only. WillisMail itself sends nothing over the network for Apple Contacts. Turning the switch off, or revoking permission in System Settings, deletes WillisMail’s local copy and cached photos.
• Address books you add (every device). On any device you can add a CardDAV address book (iCloud, Fastmail, Nextcloud, and others). WillisMail keeps a copy on your device and changes a contact on that server only when you add, edit, or delete one in WillisMail. Removing the address book deletes the local copy; the server is not changed.
• Outlook contacts (Microsoft accounts). Offered after you sign in with Microsoft; Microsoft asks you to allow it. WillisMail reads the names, email addresses, phone numbers, company, job title and department, postal addresses, birthday, website, messaging handles, notes, photos, and categories of contacts in your contact folders — only the default folder until you switch others on — and does not use your organization’s directory or Microsoft’s “people you work with” suggestions. It changes a contact only when you add, edit, or delete one in WillisMail. Stop using contacts from this account in Settings → Contacts deletes the local copy.

Your contacts are never uploaded to us, shared with us, or sent to any third party other than an AI assistant you choose to connect (Section 7). A contact group is expanded into its members’ addresses on your device before a message is sent.

6. Network Connections WillisMail Makes

WillisMail connects only to:

• The mail servers (IMAP and SMTP), calendar servers (CalDAV), and address-book servers (CardDAV) of the accounts you add.
• For a Microsoft account, graph.microsoft.com; for a Google account, gmail.googleapis.com, once, when you press Find addresses.
• The sign-in service of Google or Microsoft when you choose to sign in with them, and to refresh that sign-in later.
• The address of a calendar you subscribe to, fetched periodically with no credential attached and only from the address you entered.
• A maps service, only when you choose Open in Maps on a contact’s address: that address goes to Apple Maps on a Mac, or to OpenStreetMap in your web browser on Windows and Linux. WillisMail never loads a map, a website’s icon, or a profile picture by itself.
• Web addresses you choose to open, such as remote images in a message you decided to load or a link you clicked — links open in your system web browser, not inside WillisMail.

Remote images in HTML email are blocked by default, because loading them can reveal to the sender that you opened a message. You decide per message or per sender whether to load them. Message content is rendered in a sandbox that cannot run scripts or contact the network on its own. Links are checked on your device, using only what is in the message — they are never sent to a reputation or scanning service. WillisMail contains no automatic update check, no crash reporter, and no analytics endpoint. A calendar kept only on your device makes no network connection at all.

7. Optional AI Assistant Access (MCP)

On Mac, Windows, and Linux, WillisMail includes a built-in Model Context Protocol (MCP) server, which lets an AI assistant you run on your own computer — such as Claude Desktop, ChatGPT, Gemini, or a model running locally through Ollama — read and work with your mail, calendars, and contacts. It is not part of the mobile versions, and on desktop it is off by default. No assistant can reach your data through WillisMail unless you turn this on, and Settings let you control what a connected assistant is allowed to do.

• Local connections only. The MCP server is for AI clients running on your own device. WillisMail does not expose it to the internet, and Lacy Digital Labs is not in the path — nothing passes through any server of ours.
• What an assistant receives. When an assistant you have connected makes a request, WillisMail gives it the mail, calendar, and contact data that the request asks for, within the limits you have set.
• Where it goes next depends on the assistant. Many AI assistants, including Claude Desktop, ChatGPT, and Gemini, send what they read to their provider’s cloud service to produce a response. Once WillisMail hands data to an assistant, that assistant and its provider’s privacy policy govern it — not this policy. If you want your data to stay entirely on your device, use a model that runs locally, such as one through Ollama.
• Never your credentials. Whatever you allow, an assistant can never read your passwords or sign-in tokens, add, change, or remove an account, or change WillisMail’s AI assistant settings.
• Your choice, reversible. Turn AI assistant access off in Settings at any time, and assistants can no longer reach your data through WillisMail.

8. Third-Party Services You Connect To

Your mail, calendar, and contacts providers handle your data under their own privacy policies, not this one. When you send a message, it is delivered to your provider’s outgoing server and onward to the recipients you chose, as with any email client. Please refer to the provider’s policy for how they process data on their servers:

• Apple Privacy Policy (iCloud Mail, Calendar, and Contacts)
• Google Privacy Policy (Gmail and Google Calendar)
• Microsoft Privacy Statement (Microsoft 365 and Outlook.com)
• For a server you or your organization runs (for example Mail-in-a-Box or Nextcloud), the operator of that server.

9. Telemetry and Analytics

WillisMail does not include any telemetry, analytics, or crash-reporting frameworks. We do not know who uses WillisMail, how often, with which providers, or what is in anyone’s mailbox, calendar, or address book.

10. Tracking and Advertising

WillisMail does not use cookies, tracking pixels, advertising identifiers, fingerprinting, or any other tracking technology, and it blocks the most common form of tracking in email — remote images — unless you allow them. We do not display advertisements and do not participate in any advertising network.

11. Purchases & Payment Processing

If you purchase WillisMail through the Apple App Store, Microsoft Store, Google Play, or another distribution platform, that platform may collect transaction and account information as part of the purchase. That data is collected and managed by the platform, not by us; see the platform’s own privacy policy. If you buy a Linux build directly from our store, our Merchant of Record (Lemon Squeezy) and payment processor (Stripe) collect what they need to complete the sale, and Lacy Digital Labs keeps only your email address — used solely to tell you about updates to the app you bought, never for marketing, and never sold.

12. Children’s Privacy

WillisMail is a general-purpose productivity tool and is not directed at children under 13. Because it collects no personal information, we do not knowingly collect information from children.

13. Security

Because your data never leaves your device except to go to the servers you configure (and to an AI assistant, if you connect one), the most important security measures are on your device: WillisMail requires TLS for every server connection, stores credentials only in the operating system’s keychain, renders email in a locked-down sandbox, blocks remote images by default, never executes attachments, and keeps AI assistant access off until you turn it on. Email can contain instructions written by strangers; if you connect an assistant, allow it only what you need. Please protect the device itself with a login password and full-disk encryption; the local copy of your mail, calendars, and contacts is only as safe as the device it is on. To report a security problem, contact us through our support center.

14. Your Choices and Your Data

• See what is stored — everything is in the application’s data folder on your device; nothing is held anywhere else by us.
• Delete it — remove an account or address book to delete its local data and credentials; uninstall WillisMail to remove all of it. Your data on your provider’s server is unaffected.
• Revoke access — through your provider’s account settings (Section 4), through your operating system’s privacy settings for Apple Contacts (Section 5), or by removing the account in the app. Turn off AI assistant access in Settings to cut off every connected assistant (Section 7).
• Data requests — because we hold no data about you, there is nothing for us to export, correct, or erase; if you believe otherwise, contact us and we will look into it.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, regulatory, or operational reasons. Any changes will be posted on this page with an updated effective date.

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at:

Lacy Digital Labs LLC
Contact us through our support center

Apple, iCloud, and Mac are trademarks of Apple Inc.; Google, Gmail, Google Workspace, and Google Calendar are trademarks of Google LLC; Microsoft, Microsoft 365, and Outlook are trademarks of Microsoft Corporation; Claude is a trademark of Anthropic, PBC; ChatGPT is a trademark of OpenAI; Gemini is a trademark of Google LLC. WillisMail and Lacy Digital Labs, LLC are not affiliated with, endorsed by, or sponsored by any of them.