Privacy

Starling by 90five is an internal mail and calendar app for 90five and the people it invites.

Your mail stays with your provider

Mail and calendar contents are fetched from Google or Microsoft when Starling shows them, and are not stored on our servers. The exceptions are yours to start: a message you schedule with Send later is kept, with its attachments, until it goes out or you cancel it, and then removed.

What we store

Your name and email address; the access tokens Google or Microsoft give us for the mailboxes you link, encrypted, and never sent to your browser; your settings (signatures, templates, aliases, splits, tags, and the senders you accepted or blocked); scheduled work (Send later, snoozes, reminders), removed 30 days after it is done; and, only if you turn on Track opens, who a tracked message went to, its subject, and when and on which kind of device it was opened, kept for 180 days.

In your browser

Starling keeps a copy of your recent mail and calendar in this browser so it opens at once. Sign out (Settings → Accounts) removes it.

No AI

Starling uses no AI services. Your mail is not sent to any AI provider and is not used to train models.

Who else is involved

Google and Microsoft, your mail and calendar providers. Vercel hosts the app; Neon hosts the database in Frankfurt; Upstash runs the scheduler and only learns a job’s id and time. To show senders’ pictures, our server asks Google’s icon service for a sender’s domain and Gravatar for a hashed address, so neither learns who you are.

Your data, your call

It is used only to show you your own mail and calendar, and is not sold, shared or used for advertising. Unlinking a mailbox removes its scheduled messages and tracking records; ask us and we delete your account and everything with it.

Questions: niklas@90five.com