Privacy Policy

Rosetta is a product of Cradle Labs Limited, a company located in Nairobi, Kenya (“we”, “us”). Rosetta is an agentic email workspace: it connects to mailboxes you authorize, reads the business email that arrives there, extracts the details you have asked for, and prepares replies, records and documents for your review. Doing that work requires processing the content of that email. This policy describes what we hold and why.

Account information (your name, email address and sign-in credentials); the content of mailboxes you connect, including messages and attachments; the fields, records, replies and documents Rosetta extracts or generates from them; and the workspace configuration you create (workbooks, templates, checkpoints).

Data is held for the purposes of AI processing using large language model (LLM) technology, that processing is the product. To perform it, data may be sent to third-party model providers, each of which maintains policies that clearly define their privacy obligations with respect to the data they process. These providers act as processors on our behalf: we send them what is needed to perform the requested work, and we do not sell your data to anyone.

Mailboxes are connected through the provider’s own consent screen (OAuth), Rosetta never sees or stores your mailbox password. Access tokens are stored encrypted, and you can revoke Rosetta’s access at any time from your provider’s account settings, independently of us.

We hold data for as long as your account is active and it is needed to provide the service. Disconnecting a mailbox stops further processing of it. You can ask us to delete your account and its data by contacting us at the address below.

Data is encrypted in transit. Credentials and mailbox tokens are stored encrypted. Every agent action taken in your workspace is logged and attributable.

If this policy changes, we will update this page and its date. Questions, requests, or concerns: hello@rosettamail.io.