1. Our Zero-Knowledge Guarantee
Foxcolab Mail is engineered on a zero-knowledge trust standard. From the moment you sign up, your passwords and recovery phrases are processed client-side through local memory arrays using client-side cryptographic derivation hashes.
Your email messages, calendar events, custom labels, and file attachments are encrypted client-side using strong asymmetric and symmetric encryption protocols prior to transport. Because we do not hold the corresponding private decryption keys, we cannot read, parse, index, or decrypt your emails under any circumstances.
2. Data Collection Limits
Unlike traditional email platforms, we do not require personal identification details (such as phone numbers or alternate emails) to register.
| Data Category | What We Store | Visibility status |
|---|---|---|
| Account Credentials | Derived identity seals (64MB memory parameters) | Zero-Knowledge (Encrypted) |
| Email Contents | Encrypted ciphertext envelopes on distributed server storage | Zero-Knowledge (Encrypted) |
| Transport Headers | Sender/Recipient metadata stripped of local IPs | Scrubbed (Gateway Level) |
| Telemetry / Analytics | Strictly none. No analytic tags or trackers. | Not Collected |
3. Processing and Transit Parameters
When sending outbound emails to legacy systems (e.g., non-encrypted inboxes), our secure gateways decrypt the client-submitted payload at the edge *only* if the recipient is outside our network and client explicitly requests SMTP transmission in plain format.
To ensure data sovereignty, all internal communications between Foxcolab Mail domains remain sealed end-to-end within our distributed cluster database. Outbound emails have metadata headers (such as origin IP address, client browser type, user agent string) completely removed at the network gateway level to prevent behavioral profiling.
4. Data Deletion and Erasure
You have complete autonomy over your digital assets. Under the **Right to Erasure (GDPR Article 17)**, when you choose to delete a mailbox, message block, or complete user identity:
- All database rows linked to the user payload in our storage rings are wiped.
- Storage cluster nodes issue immediate tombstone records to delete replicas.
- Browser-side volatile cache parameters are instantly flushed from system memory.
Note: Because we hold no encryption master keys, we are unable to restore deleted data. Recoveries are physically impossible.
5. Legal Compliance & Jurisdiction
Foxcolab Technologies operates under Swiss jurisdiction, offering robust statutory protections for personal communication. We will only disclose metadata records (such as date of account creation) when forced to by a valid, binding warrant from a competent Swiss tribunal. Because email data resides as encrypted cipher blocks, we are unable to disclose decrypted data to any law enforcement authority.