Your work deserves clarity.

What this application stores

Tasks, calendar events, contacts, notes, files, drafts, and send-attempt records are saved in this browser’s IndexedDB. They are not encrypted by the application, shared automatically, or synced to a cloud workspace.

Account and mailbox access

Account sign-in, verification, and recovery use the Classified service on this site. A secure, HttpOnly cookie carries the account session; the frontend does not save account access or refresh tokens in local storage. The prior provider’s saved session tokens are removed when this release opens. When signed in, connecting Mail saves your mailbox credential encrypted with your Classified account. The account service uses it to exchange mail requests, message content and attachments with mail.classified.fi. Saved credentials are not stored in browser local storage. The device-only workspace uses a direct connection where supported; its mailbox credential stays in memory and is forgotten when the page closes.

Linked accounts

Google and Microsoft account links use the providers’ authorization pages. Connection records and credentials saved through Settings or Connect mailbox are handled by the server and are not stored in browser local storage. Linking an account does not provide that provider’s inbox in this release. Provider availability depends on operator configuration.

Third-party processing

No analytics trackers, advertising scripts, external fonts, or external AI processing are included. Hosting and authentication providers may retain their normal service logs. Mail sent to other providers is subject to those providers’ processing.

Export and removal

Settings lets you export device-saved planning data and clear it. Download saved files separately. Signing out of an account clears that account’s local workspace data. Removing local data does not delete messages on the mail server or delete your account.

Account and mailbox deletion require the account operator. Contact admin@classified.fi; automated account deletion is not implemented.

Security boundaries

Mail uses HTTPS transport and plain-text rendering. The vault is visual branding; this release does not implement end-to-end mail encryption, air-gapped keys, zero-knowledge storage, certifications, or a security-scoring engine.