Privacy Policy

Who operates Tagos Mail

Tagos Mail at tagos.one is operated by Stanislav Holotiuk, an individual, not a company. Privacy requests go to tagos@tagos.one.

What this service is

Tagos Mail hosts your mailbox. We store messages so we can show them to you and deliver them. This is not end-to-end encryption, and it is not a zero-knowledge service: operating the product requires access to mailbox contents.

We do not offer a full IMAP service. Mail in transit uses TLS where the other server supports it. Passwords are stored only as Argon2id hashes. The website session is an HttpOnly cookie.

Information we collect

When you create an account we store your name, your @tagos.one address, a password hash, the time you accepted the terms, and the terms version. A date of birth and a recovery email are optional. If you give a date of birth that shows you are under 13, signup is refused.

Mail metadata stays in the database. Message bodies and attachments stay in object storage. If you use Receipts, Tables, or Drive, we store that data for your account.

The Android app may keep a device refresh token and register a push token. A notification can include the sender’s name and the subject. If you authorize another application, we store that grant and the scopes you approved.

If a connected application uses the mailbox assistant, we store reminders for your account: the address you are waiting on, an optional name, an optional conversation id, a short note you supplied, when a reply is due, the timezone, and the status. We also store when a reply was noticed, when a reminder became overdue, and when a snooze ended, plus the time of the last summary and the last look for a reply. That memory does not include message bodies. It is deleted with the account, when you tell the assistant to forget it, and closed reminders are deleted after 30 days. A reply the assistant prepares is saved as a draft in your mailbox. The reminder stores that draft’s id, not the draft text. Sending the draft uses the send permission you grant for other mail, and it runs only when the application passes confirmation on that call. Without the send permission, or without that confirmation, the draft stays a draft.

We keep operational and audit logs, including IP address, for no more than 90 days.

Brain and an outside provider

Brain is on. When you ask it about Receipts or Tables, your question and the receipt or table data the assistant retrieves are sent to an external AI provider so it can answer. We do not name that model. Those tools do not send your mailbox. Anything you type into the question is sent. Do not use Brain for a question you do not want that provider to see.

Who else receives data

We do not sell personal information.

Hetzner hosts the servers. Google Firebase Cloud Messaging delivers Android notifications. Encrypted backups are copied off the server and kept for no more than 90 days; the off-site copy is ciphertext. An application you connect with OAuth receives only what its scopes allow, on your account.

Deleting an account does not instantly erase an encrypted backup. That copy can still contain the account until the backup itself is deleted, which is within 90 days.

How long we keep it

Account and mail data stay while the account exists. Logs and encrypted backups are kept for no more than 90 days.

From Account, then Privacy, you can download a JSON export of account and message metadata. That file does not include full message bodies. You can delete the account there by confirming your password. The address is not given to someone else afterward. Message bodies are marked for removal.

Children

You must be at least 13. If a date of birth shows someone is under 13, signup is refused. If we learn an existing account is used by someone under 13, we delete it. Write to tagos@tagos.one.

Your choices

You can export or delete the account, disconnect an application you authorized, turn Android notifications off in the phone settings, and not use Brain.

Changes

This version is 2026-10-02, effective 2 October 2026. A new account stores that version. When these pages change, the date at the top changes with them.

Contact

Stanislav Holotiuk, tagos@tagos.one.