Privacy policy

Last updated: November 2026

1. Controller
Karol Swierczyna (Husar Online), Marie-Curie-Straße 8, 50321 Brühl, Germany, email: husaronline@gmail.com

2. What this service does
MailCuck connects your email mailbox to AI assistants such as Claude (Anthropic) or ChatGPT (OpenAI). When you ask your AI assistant to, the connector retrieves emails from your mailbox via IMAP/SMTP, creates drafts, moves emails or sends them.

3. What data we store

• Credentials: email address, password (or app password), username and server settings of your mailbox – and of every additional mailbox you add. They are stored encrypted with a key that exists only on our server.
• Access tokens for the connection to your AI assistant (stored only as a hash).
• Usage timestamps (when last used) and a daily counter of sent recipients (abuse protection, deleted after 7 days).

We do not store the content of your emails. It is only retrieved when your AI assistant requests it and is passed directly to it. Access logs with IP addresses are not stored permanently; to protect against abuse, sign-in attempts are counted briefly (for at most 15 minutes) in memory.

4. Purpose and legal basis
The processing serves solely to provide you with the connection between your mailbox and your AI assistant (Art. 6(1)(b) GDPR). Abuse protection is based on our legitimate interest in secure operation (Art. 6(1)(f) GDPR). Your emails may contain personal data of third parties; it is processed only on your instruction.

5. Recipients

• Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany. The server is located in Germany (Falkenstein). A data processing agreement is in place with Hetzner.
• Your AI assistant (e.g. Claude by Anthropic or ChatGPT by OpenAI): retrieved email content is sent to the AI assistant you use yourself. The privacy policy of its provider applies, with whom you have your own contractual relationship.
• Your email provider: the connector signs in to its servers with your credentials.

6. Retention
Your credentials remain stored until you delete them or until the connector has not been used for 180 days – they are then deleted automatically. Access tokens expire after 60 days at the latest.

7. Deletion
You can delete your data yourself at any time: Delete data. If you use the address you sign in with, all additional mailboxes of this account are deleted as well. You can remove individual additional mailboxes under Manage mailboxes. The owner of a mailbox can also remove it via “Delete data” if it was added to someone else's account. Please also remove the connector in your AI assistant.

8. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection (Art. 15–21 GDPR), as well as the right to lodge a complaint with a data protection supervisory authority, e.g. the State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (LDI NRW). Requests to: husaronline@gmail.com

9. Security
Connections are encrypted (HTTPS, IMAP/SMTP with TLS). Credentials are stored encrypted. A daily sending limit applies per account for all connected mailboxes combined. Where possible, we recommend using an app password instead of your main password.