Privacy is part of the architecture.
This policy explains what the hosted Asterix service processes to provide a unified webmail workspace. It does not claim ownership of your email and does not sell personal information.
Data Asterix processes
Asterix stores the account profile you provide, security settings, connected mailbox configuration, synchronized message metadata and content, contacts, preferences, and diagnostic events required to operate the service. Mailbox credentials, integration tokens, and TOTP secrets are encrypted before database storage.
Controller and contact
YOURF SASU, SIREN 929 129 997, is the controller for this hosted service. Its registered contact address is 31 avenue de la Bourdonnais, 75007 Paris, France. Privacy and account requests can be sent to guy@yourf.com.
Google sign-in data
If you choose Google sign-in, Asterix requests only the OpenID Connect identity scopes openid, email, and profile. The service uses the verified Google subject identifier, email address, and profile name to locate your Asterix account. Google identity data is not used for advertising and is not sold.
Google sign-in does not grant Asterix access to Gmail. Connecting a Gmail mailbox would be a separate, future feature with a separate permission and consent screen if it is offered.
How data is used
- Authenticate you and protect your session.
- Connect to mail servers you explicitly configure.
- Synchronize, search, display, send, and organize email for your user account.
- Operate abuse prevention, security logging, backups, and service diagnostics.
Sharing and subprocessors
Asterix sends data to your configured mail servers and identity provider as needed to perform actions you request. Infrastructure providers may process encrypted transport or hosted storage under their service terms. Asterix does not provide mailbox content to data brokers or advertising networks.
Retention and deletion
Data remains while your account is active or while needed for security and backup retention. Deleting a mailbox connection removes its synchronized Asterix records according to the product workflow; it does not delete the source mailbox. Contact the service administrator to request account deletion or a data export.
Legal bases and your rights
Account, security, and mailbox operations are processed to perform the service you request. Security logging and abuse prevention rely on the operator’s legitimate interest in protecting users and infrastructure; legal retention may apply where required. Where processing relies on consent, you may withdraw it for the future.
Subject to applicable exceptions, you may request access, correction, deletion, restriction, portability, or object to processing. Contact guy@yourf.com. You may also lodge a complaint with the French data-protection authority, the CNIL.
Security and your choices
Protect your Google account, review connected mailboxes, and revoke provider access you no longer need. See the Security page for current controls.
Updates
Material changes will be reflected on this page. Last updated: 29 August 2026.