Data retention and deletion
This page states how long SupaMail retains each data category and how deletion begins. Some controls are automatic. Full User and Tenant deletion is available from Settings; mailbox disconnection remains support-assisted.
Current retention schedule
| Data | Current retention | How deletion starts |
|---|---|---|
| User, Tenant, and mailbox configuration | Retained while the service is active. Trial expiry or subscription cancellation pauses access. Your login and Tenant remain so you can subscribe again; Managed mailbox data is deleted on the schedule below. | Settings account deletion or support-assisted mailbox deletion |
| Managed mailbox data after a lapse | Deleted on or after 14 days after an unpaid trial ends, or 60 days after a subscription becomes past due or is canceled. SupaMail emails the account owner at least 7 days before deletion and never deletes earlier than the date in that email. This covers mirrored messages, parsed bodies, search data, Tags, mailbox credentials, and mailbox sending settings. Email stays with your mail provider. Access granted directly by SupaMail and BYO Supabase databases are not affected. | Automatic after the notice period; subscribing or restoring payment first cancels it |
| Mailbox credentials and provider tokens | Retained in encrypted form until the mailbox or target is disconnected or deleted, or Managed mailbox data is deleted after a lapse. | Settings account deletion, support-assisted disconnection, or lapse deletion |
| Message metadata, parsed bodies, and Managed search data | Retained while mirrored. Provider-deleted messages leave search after the mirror accepts the deletion; their hosted bodies are deleted within 8 days. | Provider deletion sync, Settings account deletion, or lapse deletion |
| Attachment bytes | Not durably stored by SupaMail. Incoming files are fetched from the mailbox on request; unsent outbound uploads expire within one hour. | Successful send or automatic expiry for outbound uploads |
| Sync history (events and run records) | 90 days under the current hosted runtime setting. | Automatic bounded daily pruning |
| Webhook delivery records | 30 days after delivery reaches a terminal delivered or dead state. | Automatic garbage collection |
| Send operation records | Retained until the related mailbox or Tenant is deleted. | Settings Tenant deletion or support-assisted mailbox deletion |
| Message Tags | Retained until an authorized User or agent deletes the Tag or its message is deleted. Tag reads exclude missing and provider-deleted messages. A daily bounded check deletes those stored Tag rows. Tenant deletion deletes all Tags. | Settings, an authorized API or MCP client, or automatic lifecycle cleanup |
| Billing, legal acceptance, security, and support records | Retained only as needed for payment records, fraud prevention, legal obligations, security, and dispute resolution. | Reviewed as part of an account or privacy request |
| Supabase service logs | 1 day. | Automatic provider expiry |
| Vercel runtime logs | 1 hour. No log drain is configured. | Automatic provider expiry |
| Fly runtime logs | About 7 days. Fly publishes this as an approximate window. No external log drain is configured. | Automatic provider expiry |
| Database, body Storage, and search backups | No daily recovery backup or point-in-time recovery is configured. SupaMail has not configured a separate body Storage or search backup. | No SupaMail-configured backup copy to erase |
| Other provider records | Provider-controlled. SupaMail has not verified one exact maximum for Stripe, Rackspace, GitHub, Google Fonts, or provider-internal security records. | Handled under supplier terms and applicable law |
Available controls
Revoke AI and API access
Revoke the smk_ token in Settings and remove SupaMail from the AI client. SupaMail-side OAuth revocation currently requires a manual request.
Review or delete Message Tags
Review Tags, remove one Tag, or delete all Tenant Tags in Settings.
Disconnect a mailbox
Self-service mailbox disconnection is not available yet. Email hi@supamail.dev from the sign-in address and identify the mailbox. Do not send the mailbox password. Support stops synchronization and removes the stored credential.
Delete an account and synchronized data
Use the Delete control in Settings. It removes the User, Tenant, connected mailbox configuration, hosted mirror data, search data, caches, and active tokens. Mailbox disconnection without deleting the User remains support-assisted.