Privacy policy

Last updated 20 October 2026

Who we are

Issary is run by an individual trading as Issary in Sweden, ahead of registering the business. For the personal data described here, that person is the data controller. Write to support@issary.com about anything in this policy.

This policy covers the issary.com website, the Issary account, the apps you use with it in a browser, and what the Mail desktop client sends to the account.

What we hold, and why

• Your account. Your email addresses, your name, and the language and time zone you choose. We need these to sign you in, to show you who you are in every app, and to write to you about your account.
• How you sign in. Your password and any passkeys are held by the sign-in service and are never shown to any app. For each place you are signed in we keep the time, the IP address and the browser or device, so you can see your sessions and sign them out, and so we can spot an account being misused. For each app you open we also keep the first and the last time you opened it — not each visit — so we know which apps are actually used; it is in your data export and goes when your account does.
• A security log. A record of important account events — signing in, changing your email, inviting somebody, deleting the account — with the IP address and device they came from. It exists to investigate misuse and abuse, and entries are deleted after 12 months.
• What you put in the apps. Tasks, contacts and notes, calendar events, bookings, quotes and invoices, and files you upload. We store them to give them back to you and to the people you share a workspace with, and for no other purpose.
• Mail. Your email and the passwords to your mailboxes stay on your computer and never reach our servers. The account holds your sign-in and, if you use assisted writing on our provider, how many requests you made each day.
• Feedback and the mailing list. What you write in a feedback box, and the email address you give if you ask to hear when something ships.

Other people's details in your workspace

When you keep details about your own customers in Issary — their contact details, what they booked, what you invoiced them — or when a member of the public fills in your intake form or books a time with you, you decide what is collected and why. For that data you are the controller and we process it on your behalf, only to run the service for you. When somebody accepts a quote, we record the name they typed and the IP address it came from, as evidence of the acceptance for both of you.

Assisted writing

When you ask the Mail client to draft, rewrite or summarise and your plan includes assisted writing on our provider, the text you are working on is sent through our servers to that provider and the answer comes straight back. We do not store what you sent or what came back; we count the request. The text may first be checked by an automated moderation service to stop abuse.

If you use your own provider key instead, the request goes from your computer directly to the provider you chose and never passes through us.

Who else handles it

We use these services to run Issary. Each one sees only what it needs for the job listed.

Where data goes to the United States we rely on the provider's Standard Contractual Clauses or equivalent safeguards. We do not sell your data, rent it, or share it with advertisers, and there is no advertising anywhere in Issary.

Why we are allowed to

We process your account and what you put in the apps because you asked us to provide the service (a contract). We keep the security log and screen assisted-writing requests because preventing misuse is a legitimate interest. We send you the mailing list only because you asked to be on it, and every message has a one-click way off.

How long we keep it

Everything is kept while your account exists. You can delete your account at any time from the Dashboard, under Data & privacy. From that moment it is locked and nobody can sign in to it; for 30 days a link we email you can undo it, and then it is erased from every app. Backups roll over within 14 days after that.

Some things outlive an account on purpose. A workspace you shared with other people keeps what it needs to keep working, with your name taken off. Quotes and invoices a business issued stay in that business's books, because bookkeeping law requires them. The security log is kept after deletion, for its 12 months, to investigate misuse of the account.

Your rights

You can see, correct, download and delete your data. Most of it you can do yourself: every app has a download of what it holds about you, and the Dashboard has the rest, along with account deletion. For anything else — including objecting to or restricting how we process your data — write to support@issary.com. If you think we have got it wrong, you can complain to your data protection authority; in Sweden that is the Swedish Authority for Privacy Protection (IMY).

Cookies

Issary sets only the cookies it needs to work. There are no advertising or analytics cookies and no tracking scripts, which is why there is no cookie banner.

Changes to this policy

When this policy changes, the date at the top changes with it. If a change affects what we do with data you have already given us, we will tell you by email before it applies.