3 ms·

> At the time, which was over three years ago, they had kept a copy of every single email of yours that you sent or received while a part of their service. Thos

> At the time, which was over three years ago, they had kept a copy of every single email of yours that you sent or received while a part of their service. Those emails were kept in a series of poorly secured S3 buckets. From https://news.ycombinator.com/item?id=14180463 https://news.ycombinator.com/item?id=14180463 However, their Privacy Notice claims to not store emails that are not personal emails but certain types of "commercial" emails as defined by the CAN-SPAM act. Are they really hoovering up everything? From https://unroll.me/legal/privacy/ https://unroll.me/legal/privacy/ > We also collect non-personal information − data in a form that does not permit direct association with any specific individual. We may collect, use, transfer, sell, and disclose non-personal information for any purpose. For example, when you use our services, we may collect data from and about the “commercial electronic mail messages” and “transactional or relationship messages” (as such terms are defined in the CAN-SPAM Act (15 U.S.C. 7702 et. seq.) that are sent to your email accounts. We collect such commercial transactional messages so that we can better understand the behavior of the senders of such messages, and better understand our customer behavior and improve our products, services, and advertising. We may disclose, distribute, transfer, and sell such messages and the data that we collect from or in connection with such messages; provided, however, if we do disclose such messages or data, all personal information contained in such messages will be removed prior to any such disclosure. We may collect and use your commercial transactional messages and associated data to build anonymous market research products and services with trusted business partners. If we combine non-personal information with personal information, the combined information will be treated as personal information for as long as it remains combined. Aggregated data is considered non-personal information for the purposes of this Privacy Notice.

canspamcancan 10y ago
> However, their Privacy Notice claims to not store emails that are not personal emails but certain types of "commercial" emails as defined by the CAN-SPAM act. > Are they really hoovering up everything? I worked on a competing product a long long time ago. (Well, a competitor in the "all your emails are belong to us" space.) The way ours worked was that we hovered everything, but before we provided any analytics staff access to it, we grabbed only emails of interest, tokenized the data in them, and then copied them to the analytics data store. But we were constantly refining what "of interest" meant, which means that we had to go back and re scan the archives periodically, which would always turn up new stuff for the analytics team. The need to re scan historical data as the models improved meant that we had to keep all of the source material, even if it wasn't accessible to the people who were most interested in looking at it.

canspamcancan 10y ago

> However, their Privacy Notice claims to not store emails that are not personal emails but certain types of "commercial" emails as defined by the CAN-SPAM act. > Are they really hoovering up everything? I worked on a competing product a long long time ago. (Well, a competitor in the "all your emails are belong to us" space.) The way ours worked was that we hovered everything, but before we provided any analytics staff access to it, we grabbed only emails of interest, tokenized the data in them, and then copied them to the analytics data store. But we were constantly refining what "of interest" meant, which means that we had to go back and re scan the archives periodically, which would always turn up new stuff for the analytics team. The need to re scan historical data as the models improved meant that we had to keep all of the source material, even if it wasn't accessible to the people who were most interested in looking at it.