How Xoopit Manages Your Data

Xoopit is an email based service founded to give you more control over your information.

We are committed to giving you an outstanding product that you can trust. We maintain physical, electronic, and procedural safeguards to protect your information.

In the spirit of keeping an open and transparent dialogue with our users, here are the answers to the most common questions on how we manage your data that came up today.

UPDATE: 11/6/08: Xoopit has evolved its service since this post was initially created. For the most up to date answers on these questions please see our Privacy & Security FAQ.

Question #1: Why do you need my Gmail email address and password?
In order for us to index all the interesting stuff in your email, we talk to Gmail via secure IMAP. You can think of us like a big Outlook or iPhone talking to Gmail in the sky. We would love it if there was a way to get at mail content without requiring your Google credentials -- i.e. AuthSub for IMAP (see this post).  We will support these APIs as the webmail providers make them available to us.

Question #2: What do you do with my password?
We currently use industry best practices to encrypt and store this data. We also have a rigorous internal policy to ensure your data is not tampered with. Finally, all communications with Gmail are done securely (secure IMAP and SMTP for you techies). This is no different from what happens when you login into Gmail yourself from a web browser, an iPhone or Outlook. All uses of your password are secure.

Question #3: Do you store a copy of my email?
We currently index and store a copy of your email on our servers so that we can help you discover new things lost in your inbox as we add new indexing features, like support for Facebook messages.

Question #4: Will you delete my account if I ask?
Yes, we will in 24 to 48 hours. No ifs, ands or buts. That said, please send us feedback.

Lastly a tip: https support
You may browse our service over https for an enhanced secure browsing experience in the same way that users can use Gmail over https.

We are strong believers in transparency. If you have any questions, please comment here or send us mail at feedback@xoopit.com.

Comments

[Lenwood]

I love your product. Do you know of a site or email address where we can petition Google for Authsub for IMAP?

[Jonathan Katzman]

@Lenwood. Thanks! Don't know of a site, but happy to have people comment here and we'll discuss with Google.

[Cliff Pavlovic]

Yes, I think there should be a petition to get Google to implement Authsub for IMAP.

Xoopit looks good, really would like to use the service, but I have a personal policy not to share my login details for security purposes. Till an authentication system can be used by Xoopit to access my Gmail, won't sign up.

That being said, I think Xoopit is a great service (I'm really surprised Google didn't think of giving something similar in the first place!) and will use it once the sign up system is dealt with.

Keep up the good work!

[Bijan]

my name is bijan too :)

[Bijan]

my name is bijan too :)