Privacy Policy
The short version. atbridge.ai is built so that your mail, contacts, and calendars are processed on your machine and never sent to us. Our server knows three things: your email address (to identify you and assign your license), a device record (to enforce how many devices your plan allows), and — transiently — your IP address (to throttle abuse). Payments are handled by Stripe. Everything else stays local.
Who we are
atbridge.ai ("we") provides the atbridge.ai application — a local bridge that lets AI
assistants work with your Thunderbird mail, contacts, and calendars — and the
licensing service at atbridge.ai. Privacy questions and requests:
contact@atbridge.ai.
What never leaves your machine
- The contents of your mail, contacts, and calendars. All reading, searching, and writing happens locally between the atbridge.ai app and your own Thunderbird. Our server has no access to it — by architecture, not just by policy.
- Your AI prompts and responses. When you use AI features, your machine talks directly to the AI provider you chose (e.g. OpenAI, Anthropic, or a fully local Ollama). That traffic never passes through our servers. The provider's own privacy policy applies to it.
- Your AI API keys. Stored on your device, encrypted with a key kept in your operating system's keychain. The API keys themselves are never sent to or stored on our server in any form. On the Pro plan, activating the in-Thunderbird AI feature exchanges that wrapping key (not your API keys) with our server, which returns it encrypted under a server-held master key — on each use the server unlocks that blob again. This server check is how the Pro plan is enforced; the wrapping key is processed in memory and never stored in plaintext. Our server alone cannot read your API keys: it never receives the encrypted key file that lives on your device.
What we collect, and why
| Data | Why | Where it lives |
|---|---|---|
| Email address | Identifies your account: assigning and verifying your license, magic-link / one-time-code sign-in to the dashboard, and trial activation. | Our database (EU). |
| License key & plan | Entitlement checks — which features and limits apply. | Our database (EU). |
| Device record | A random device ID plus your computer's name (hostname), platform (e.g. macOS), and the app version — so we can enforce the number of devices your plan allows, and so you can recognise and deactivate devices in your dashboard. No hardware fingerprinting. | Our database (EU). |
| Thunderbird account emails (during automatic activation only) | When you use flowless activation, the email addresses of your Thunderbird accounts are matched against licenses to find yours. Used for the match; the matched address becomes the license's bound email. | Processed at request time; only the bound email is kept. |
| Thunderbird account email addresses (for abuse prevention) | The email addresses (not the contents) of the accounts logged into your Thunderbird are sent when your license checks in, so we can tell that the same person's inboxes belong to one free trial — this stops one person farming unlimited free trials by activating with a different email each month. Only addresses; never messages, subjects, recipients, or folders. | Our database (EU); used only to link a trial to one person. |
| Usage counts | Monthly numbers of operations (e.g. "142 operations in June") to enforce plan limits. Never the content, recipients, or subjects of anything. | Our database (EU). |
| IP address | Security only: rate-limiting all API endpoints, throttling trial sign-ups, and blocking abusive sources. Not used for tracking or profiling. | Processed in memory and in short-lived server logs; stored only in the trial-throttle log and, if abusive, on a blocklist. |
| Billing | Payments, invoices, and VAT are handled entirely by Stripe. Your card details never touch our servers; we store only Stripe's customer and subscription identifiers. | Stripe; references in our database (EU). |
That is the complete list. We collect no analytics from the app, no telemetry beyond the above, no contact lists, no message metadata.
Your consent
The app asks for your explicit consent — showing exactly the list above — before it contacts our server for the first time, and asks again if the scope of collected data ever grows. Until you agree, nothing is sent. That same prompt is also where you accept our Terms of Service (which include the Refund policy): continuing past it agrees to the Terms and to this Privacy Policy together, and we record the version and timestamp of your acceptance on your device so it can be re-confirmed if these documents change.
Cookies & analytics
- The account dashboard uses one session cookie (HttpOnly, signed) to keep you logged in. No third-party cookies there.
- This website (landing pages and documentation) uses Google Analytics for anonymous usage statistics — only if you accept the cookie banner. Analytics storage is denied by default until you choose, IP addresses are anonymized, and advertising features are permanently disabled. Your choice is remembered either way.
- The atbridge.ai application itself contains no analytics and sets no cookies.
Where your data lives
Our service and database are hosted in the European Union. We use a small number of established service providers for hosting, database, payment processing, and delivery of sign-in emails, under appropriate data-processing terms. A current list is available on request via contact@atbridge.ai.
Retention & deletion
- Account and license data is kept while your account is active.
- You can deactivate devices yourself from the dashboard.
- To delete your account and its data, email contact@atbridge.ai from your account address. We delete personal data within 30 days, except records we must keep for accounting/tax (handled by Stripe) and minimal abuse-prevention entries.
Your rights
Depending on where you live (e.g. GDPR in the EU), you have the right to access, correct, export, and erase your personal data, to object to processing, and to lodge a complaint with a supervisory authority. Write to contact@atbridge.ai — we answer every request.
Changes
If this policy changes, we update this page and the effective date. If we ever collect more than listed here, the app will ask for your consent again before sending anything new.