> However, their Privacy Notice claims to not store emails that are not personal emails but certain types of "commercial" emails as defined by the CAN-SPAM act.

> However, their Privacy Notice claims to not store emails that are not personal emails but certain types of "commercial" emails as defined by the CAN-SPAM act. > Are they really hoovering up everything? I worked on a competing product a long long time ago. (Well, a competitor in the "all your emails are belong to us" space.) The way ours worked was that we hovered everything, but before we provided any analytics staff access to it, we grabbed only emails of interest, tokenized the data in them, and then copied them to the analytics data store. But we were constantly refining what "of interest" meant, which means that we had to go back and re scan the archives periodically, which would always turn up new stuff for the analytics team. The need to re scan historical data as the models improved meant that we had to keep all of the source material, even if it wasn't accessible to the people who were most interested in looking at it.