The data Heron stores

Heron only keeps what it needs to sync your mailboxes across your devices. No ads, no selling data, no analyzing your messages for commercial purposes. The full details are in the privacy policy.

What Heron stores

• Your Heron account: name, email address, password (as a one-way hash), preferences.
• Your mailboxes: address, display name, signatures, servers, username, and password or Google / Microsoft tokens, encrypted (AES-256-GCM).
• An index of your messages, to show lists and notify you quickly: sender, recipients, subject, date, a short excerpt from the start of the text, read or flagged state, whether there are attachments, folder.
• Messages being sent (undo delay, scheduled sends), until they’re sent or cancelled.
• Snoozed messages and their reminder date.
• An address book deduced from your conversations, to suggest recipients.
• Your devices: what’s needed to send them notifications, and their notification settings.
• If you connect an AI agent: the list of agents, their activity log (90 days) and sends awaiting approval (24 hours at most). See What are AI agents?.

What Heron doesn’t store

The full content of your emails and attachments aren’t stored: they’re read from your mail server when you open them. Your emails stay with your provider (Gmail, iCloud, Outlook…).

Where your data lives

Heron’s servers are in France. Traffic with the service is encrypted (HTTPS).

How long

As long as your account exists. Removing a mailbox erases its credentials and its index. Deleting your account erases everything immediately, except technical security logs, kept 3 months at most.

Your rights

To access, correct, export or delete your data, write to contact@heronmailapp.com.