Who operates Plexus
Plexus Mail is provided by Unsync Software. For privacy questions or requests, email [email protected].
Information we process
- Account and authentication information: your public handle, PeerID, public messaging keys, passkey public-key records, recovery-code hashes, linked-device labels, sessions, and blocked-sender choices.
- Security information: the network source used for short-lived rate limiting, a coarse signup country when Cloudflare supplies one, and limited abuse or security events.
- Delivery information: encrypted message packages, recipient routing identifiers, timestamps, delivery status, and receipts.
- Notification information: a web-push endpoint and subscription keys only when you enable notifications. Notification text is generic and does not contain mail content.
- Optional hosted-backup information: if you opt in, G1 stores an encrypted mailbox snapshot together with the account handle, originating device identifier, encrypted size, and update time needed to operate and display the backup.
- Support information: the contents of messages you choose to send to support.
Readable mail stays local
Readable messages, contacts, drafts, mailbox history, and private messaging keys are kept in the encrypted local vault on your device. Mail is encrypted separately for each recipient device before it is relayed. Plexus relay servers ordinarily receive ciphertext, not readable mail.
If you opt in to hosted mailbox backup, encryption happens on your device before upload. G1 receives the encrypted snapshot but not your backup passphrase, and Plexus cannot restore or read the snapshot without that passphrase. You can instead use a local backup file or skip backup setup.
Recipients can still read, copy, forward, capture, or disclose mail they receive. End-to-end encryption cannot control what a recipient does after decryption.
Safety reports
If you deliberately report a message, Plexus sends the reported subject, up to 10,000 characters of message text, the selected reason, and the sender and reporter identities to the private operations dashboard. Attachments are not included. This exception is shown before you submit a report.
Why we process information
Where data-protection law requires a legal basis, we use information to perform the service you request, protect the service and its users based on legitimate interests, comply with legal obligations, or act on your consent for optional features such as notifications and hosted mailbox backup. You may withdraw consent by disabling the relevant feature and deleting its stored data.
Retention
- Queued encrypted packages are removed after confirmed delivery or expire after 30 days.
- Delivery receipts and relay-send events are retained for up to 30 days.
- Expired sessions and temporary authentication challenges are removed automatically.
- After 365 days without a successful passkey unlock, an inactive account, its public keys, and queued packages are removed. Its retired handle is retained to prevent reassignment.
- Safety reports are retained as an abuse-review record unless the operator determines they should be removed.
- Encrypted server backups are retained for up to 30 days on separate owner-controlled infrastructure; the decryption key is stored offline.
- Optional encrypted mailbox snapshots on G1 remain until you delete them, replace them, or 365 days pass without an update. Deleting a hosted backup does not delete local mail or backup files you saved yourself.
Service providers and international processing
Cloudflare provides public routing and network protection and may provide a coarse country code. Browser push providers deliver optional generic notification signals. Discord and Healthchecks.io receive operational availability and backup-status alerts—not handles, contacts, or message content. Information may be processed in countries where Plexus and these providers operate. We use service providers only for defined operational purposes and review the safeguards applicable to international transfers.
Your privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or an objection to certain processing. You may also withdraw consent and complain to your local data-protection authority. Email [email protected] from an address where we can safely follow up. We may need to verify that the request concerns your account.
California notice
Plexus does not sell personal information or share it for cross-context behavioral advertising. We do not use personal information for targeted advertising. California residents may request to know, correct, or delete covered personal information and will not be discriminated against for making a request. These statements apply whether or not Plexus is currently required to comply with the California Consumer Privacy Act.
Cookies and device storage
Plexus uses a strictly necessary session cookie to keep an unlocked account authenticated. The app uses browser storage for the device-local encrypted vault and settings needed to provide the service. The public website does not use advertising or analytics cookies. If that changes, this notice and any required consent controls will be updated before non-essential tracking is enabled.
Children
Plexus is not directed to children under 13, and we do not knowingly create accounts for them. A parent or guardian who believes a child provided personal information should contact us so we can review and remove it where appropriate.
Changes to this notice
We may update this policy when the service or legal requirements change. Material changes will be identified by a new effective date and, where appropriate, communicated inside the service.