SpacebackPrivacy policy
Operator: Millennial R&D, LLC · Contact: contact@millennials.tech · Effective: November 15, 2026
The short version
The Spaceback desktop app runs on your computer. It connects directly from your computer to your own mail and drive provider (Google, Microsoft, or your IMAP server). We do not operate any server that receives your mail, contacts or files from the app. We cannot see them, and there is no analytics, advertising, tracking or crash reporting in the app. The separate Spaceback website keeps a small amount of account and billing data, described under "The Spaceback website". We do not sell or share your personal information for advertising.
What the app reads
To do its job, with your permission, Spaceback reads from your provider:
- message metadata: sender name and address, subject, date, size, labels/flags and a short text preview;
- attachment names, types and sizes (never attachment contents);
- optionally (only if you allow it) Drive/OneDrive file names, sizes, checksums and modification dates, and your storage usage.
It does not read message bodies, attachment contents or file contents, except when you use Archive: then, for the messages you chose, Spaceback downloads the complete messages from your provider to your computer and writes them into a zip file in the folder you picked. Nothing is uploaded anywhere.
The WhatsApp tab works only on a folder of your own computer that you choose. It reads file names, sizes and file contents (to compare them for exact duplicates), and never sends anything over the network.
What it changes
The only change Spaceback makes to your mailbox is moving messages to your provider's Trash (or back, with Undo), when you confirm. It never sends mail and never permanently deletes anything. Archiving only copies messages; it moves them to Trash afterwards only if you tick that box and confirm.
On your computer, the WhatsApp cleanup moves duplicate files to your computer's Trash / Recycle Bin (never deletes them for good) and only inside the folder you chose, after you confirm.
What is stored on your computer
Everything below stays on your computer in a folder only your user account can read. You can see it all under Privacy & data.
| What | Why | How long |
|---|---|---|
| Sign-in tokens (or an IMAP app password, only if you tick Remember) | So you do not sign in every time | Until you sign out or remove the account. Kept in your system keychain when available, otherwise in a file readable only by you |
| List of your accounts (names, server settings; no passwords) | So you can switch accounts | Until you remove the account |
| Protected-message list (message ids) | So protected messages are never moved | Until you remove the account |
| History of what you moved (message ids, the filters used, counts) | So Undo works; you can export it | Undo is available for 30 days; after that the message ids are dropped and only the date, count, size and filters are kept, until you remove the account |
| Licence key (a signed ticket with an anonymous id, your plan and its end date; no name or email) | So the app knows which plan you have, checked on your computer without contacting anyone | Until you remove it or delete local data |
| History of duplicate files moved to your Trash (their original and Trash locations, sizes) | So Undo works for the WhatsApp cleanup | 30 days, then forgotten; erased by Delete all local data |
| Mail archives (zip files) | You asked for them | They are saved in the folder you chose, not in Spaceback's data folder, and are never removed by Spaceback. They are not encrypted: keep them private |
| Cache of recently seen sender names/addresses, subjects, sizes and dates | Makes repeat scans faster | 30 days, then forgotten; clearable any time |
| Preferences (whether moving to Trash is switched on) | Scan-only mode and the first-run screen | Until you remove local data |
| Reports of unexpected errors (a traceback, redacted; newest 10 kept) | So you can see and, if you choose, share what went wrong. Never sent automatically | Until you remove local data |
| Diagnostic log | Troubleshooting | Rotated automatically (a few MB). Email addresses and tokens are removed before anything is written |
The Spaceback website
This section covers the Spaceback website (the web version with the demo mailbox, the WhatsApp cleaner and billing). It is separate from the desktop app above.
- The website does not connect to any Google or Microsoft account. Its mailbox is a demo with made-up messages, so it holds no Google user data.
- Account data: your email address and a salted hash of your password (never the password itself), stored on our server so you can sign in. A session cookie keeps you signed in. We use no advertising or analytics cookies and no third-party trackers.
- Payments: card details are handled by our payment provider, Stripe, and never reach us. We keep your Stripe customer id, your plan, and when it ends or renews.
- WhatsApp cleaner: it runs entirely in your browser. The files you pick are read on your computer and are never uploaded.
- Retention and deletion: we keep this until you delete your account (Billing, then Delete my account), which erases your sign-in, demo data, plan and pass records. Stripe keeps its own payment records under its own policy. Our hosting provider's standard server logs (for example IP addresses and requested pages) may be kept for a short, routine period.
- Records we may keep after deletion: limited records we must or may keep to meet tax, accounting, fraud-prevention, security and legal obligations or to resolve disputes (for example an invoice record), for as long as the law or those purposes require.
- Licence keys and staff tools: our authorised staff can, through an internal administration system, grant or remove a plan, suspend an account or erase an account on a valid request. These actions are logged. Staff use this only to provide support, billing and security, and do not see any mail content, because the website holds none.
- Service providers: we use hosting and payment (Stripe) providers who process data for us under their own terms. They may process it in the United States or other countries.
Who receives data
- Your provider (Google, Microsoft, or your mail server) receives the requests Spaceback makes on your behalf, exactly as if you used their website. Their own privacy policies apply to that.
- Desktop app: no one else. Spaceback does not send your data to the operator or to any third party from the desktop app (the app does not send your data anywhere but your provider). Links that open in your browser (for example "Open Trash") go to your provider's own pages.
- Website: only the service providers named in "The Spaceback website" (hosting, Stripe), and authorities where the law requires it.
- Legal and business transfers: we may disclose information to comply with law, enforce our terms, protect rights and safety, or in a merger, sale or reorganisation, subject to this policy. We never sell personal information.
Google user data (Limited Use)
Spaceback's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, data obtained through Google APIs is used only to provide the features you see in Spaceback's user interface, is not transferred to anyone, is not used for advertising, is not used to build or improve any other product, and no human reads it.
Microsoft user data
Data obtained from Microsoft Graph is used only to provide the features you see in the app, is processed on your computer, and is not transferred to the operator or any third party.
Your choices and rights
Depending on where you live (for example the EU/UK under GDPR, or California, Colorado, Virginia and other US states), you may have the right to access, correct, delete, port or restrict our use of your personal information, to object to processing, and not to be discriminated against for exercising these rights. We do not sell or share personal information for cross-context advertising and do not profile you. Write to the contact below; we will respond within the time the law requires and may need to verify your identity. If you are in the EU/UK, our legal bases are performing our contract with you (account and billing), legal obligations, and legitimate interests in security and fraud prevention; you may also complain to your local data protection authority. Data held only on your computer is under your control as listed here.
- See it: Privacy & data lists every file and what it contains.
- Export it: Privacy & data → Export history… (JSON or CSV).
- Erase it: Delete all local data… signs out of every account and removes everything Spaceback stored. Because we hold no copy, deleting it on your computer deletes it everywhere we could have it.
- Withdraw access: remove Spaceback in your Google/Microsoft account settings (links in
docs/permissions.md).
Children
Spaceback is not directed at children under 13 (or the minimum age in your country), and our terms require users to be adults. We do not knowingly collect information from children; if you believe we have, contact us and we will delete it.
Security
Connections use TLS with certificate and hostname verification; stored secrets are protected as described in docs/security.md. No system is perfectly secure and we cannot guarantee absolute security. If a breach affecting your website account data occurs, we will notify you and authorities as the law requires. Report problems per SECURITY.md.
Changes
We may update this policy and will change the effective date; for material changes we will post a notice in the Service or release notes before they take effect where the law requires. The use of the Service is also subject to our terms of use, including the limitations of liability and the binding arbitration and class-action waiver in them, which apply to any dispute about privacy.
Contact
contact@millennials.tech