Privacy Policy

Effective September 30, 2026

Declutter.ai is operated by Fortress Development Group LLC ("we," "us"), Houston, Texas. This policy explains what we collect, what we do with it, and what we do not do.

What we collect

  1. Account information. Your name, email address, and billing details. Payments are handled by Stripe. We never see or store your full card number.
  2. Mail account credentials. To sort your mail we store an app password for each connected inbox. These are encrypted at rest.
  3. Mail content. We read message headers and content to classify mail and extract deadlines. We send the AI provider only the sender, subject and first 500 characters of the body after removing HTML, signatures and quoted replies. Attachments are not sent.
  4. Usage data. Which messages you move by hand, so the service can learn your preferences. Log data such as run times and errors.

What we do with it

  1. Sort your mail into folders.
  2. Extract deadlines and pending replies for your daily brief.
  3. Learn your preferences from how you move mail.
  4. Bill you and support you.

What we do not do

  1. We do not delete your mail. We move it. Nothing is permanently removed.
  2. We do not store the full text of your messages. Message content is processed and discarded. We keep sender addresses, message identifiers, hashed thread and decision keys, folder rules, processing checkpoints, sanitized deadline and pending-reply summaries, and brief delivery records. We do not log subjects, bodies or passwords.
  3. We do not sell, rent, or share your data with advertisers or data brokers.
  4. We do not train AI models on your mail.
  5. The daily brief and service messages are sent from our address, not from your account.

Third parties we use

  1. AI classification. Ambiguous messages are sent to a large language model provider (currently Anthropic) for classification. Only the fields needed to classify are sent. Our AI provider does not train on your data. It may keep it for a limited period under its commercial terms.
  2. Stripe for billing.
  3. DigitalOcean for hosting, US region. Postmark processes service emails and sanitized daily briefs for delivery.

Google and Microsoft

This build connects through IMAP with an app password where your provider permits it. OAuth connections are not currently offered. Availability depends on your provider and account settings.

Launch programs

For the Microsoft waitlist we store your email, provider and requested inbox count until launch notification or your removal request. Referral records link account codes and credit status; Stripe card fingerprints are checked transiently to prevent self-referrals. Associated waitlist and referral records are erased with account data. Founding seat numbers survive deletion without an account identifier so limited offers are not reissued.

Retention

Mail credentials and saved state are kept while your account is active. Cancellation stops sorting and removes app passwords immediately, with no partial refunds. Account details, login tokens, account event records and saved state are erased from the live service within 48 hours. Shadow suggestions contain sender and subject, never bodies, and expire after 30 days. Encrypted backups containing erased data expire within 14 days after erasure. A content-free trial eligibility hash is retained to enforce one trial per customer. You can delete your account immediately using the typed confirmation on your account page. Unfinished signup accounts and credentials are removed after 72 hours, subject to confirmation that payment has not completed. Cached classification decisions expire after 14 days. Encrypted backups are kept for 14 days. A restore applies our separate deletion records before making recovered data available, so it never brings back a deleted account. We retain only content-free deletion identifiers needed to enforce this safeguard.

Security

Credentials are encrypted at rest. All connections to mail providers use TLS. Access to production systems is limited to the operators of the service.

Your rights

You can delete your account from the account page. To request a copy of your information or ask what we hold about you, email privacy@declutter.ai.

Children

The service is not for anyone under 18.

Changes

If this policy changes we will email you before the change takes effect.

Contact

Fortress Development Group LLC
privacy@declutter.ai