promodexo exists to keep companies away from your real email. Handing your data to anyone would defeat the entire point. Here is exactly what we do and don't do.
The short version: your promodexo address is receive-only. We never sell your data or your attention. You can export or delete everything, every message and every passkey, in one tap, and it's gone for good.
What we collect
Your recovery email. One address, given at signup, used only to send your sign-in code and to reach you if you're ever locked out. It is never shown to any sender and never used for marketing.
The mail sent to your promodexo address. We receive and store it so you can read it in your Circular and Paper. We do not read it to profile you.
A passkey. Your device holds the secret; we only store its public half to verify sign-ins. There is no password for us to lose.
Minimal operational data: a hashed IP at signup for abuse prevention, and basic counts to keep the service running. No third-party trackers, ad pixels, or analytics SDKs.
What we never do
We never sell, rent, or share your data with data brokers or advertisers.
We never let a sender learn your real email.
We strip tracking from the mail you read. Remote images from unverified senders are held back so opening a message doesn't quietly report you as a live target.
We don't build an advertising profile of you. If we ever show a promoted message, it will be based on preferences you set and choose to share, and you can turn it off.
How we keep it safe
Every inbound message is authenticated (SPF, DKIM, DMARC) before it's surfaced to you, so spoofed and unverified senders never reach your rooms. Your mailbox is physically isolated from every other user's. Sign-in is passkey-only.
Your control
From Settings you can view your account, sign out everywhere, and delete your account, which erases every message and every passkey and retires the address for good. We honor deletion immediately, not "within 30 days."
Contact
Security reports: see security.txt. Questions about your data: reach us at the address listed there.