Where your data lives

Eivor is built local first. Here is the whole picture, feature by feature, so you know what stays on your computer, what syncs with your email provider and what goes through Eivor's servers.

What	Where	How it works
Email, attachments and search index	Your computer	Stored in a local database. Synced with your email provider (Microsoft 365, Google or the IMAP server), which is the source. No email content is stored on Eivor's servers.
Sign-in to the email account	Your computer	OAuth tokens and passwords are encrypted with Windows' own key management (DPAPI) and never leave the computer, with one exception: for Microsoft 365 a short-lived access token is sent to Eivor's server so it can receive Microsoft's real-time notifications about new mail and enrich them. It is renewed every 30 minutes and cannot be used to sign in.
Private notes	Your computer	Stored locally only. Never sent or synced.
Automatic sorting	Your computer	Rules, sender learning and local language models run on your computer. In Hybrid mode, uncertain cases can be sent to cloud AI as anonymized text for classification.
Security check	Your computer	The analysis of senders, links and attachments happens locally.
Snooze	Eivor's servers	Account id, thread id and time. No content. Stored so a snooze survives a reinstall and follows you to another computer.
Calendar	Email provider or Eivor's servers	Microsoft 365 and Google calendars live with the provider. Local calendars for IMAP accounts sync through Eivor's servers.
Tasks and teams	Eivor's servers	Title, description, comments, attachments, participants and history. Required for sharing between people and devices. Email linked to a task stays on your computer; only the link is stored.
Eivor account	Eivor's servers	Email address, plan, payment status and a one-time code at sign-in. Card details are handled by Stripe and never reach Eivor.
AI tools	Depends on your choice	Built-in cloud AI sends the content needed for the job (for example the thread to summarize) via Eivor's server to the AI provider. Your own key sends directly to your provider. Local only processes on your computer.
Open status	Eivor's servers	Off by default. If you turn open status on, mail you send contains an invisible image. When the recipient's email app loads it, the time, device type and email app are stored, linked to your account. No IP address is stored. Data is deleted after 12 months. You turn the feature off in Settings under Account.
Support	Eivor's servers	The chat and any tickets are stored. Diagnostics are attached only after you have seen the masked text and approved.
Diagnostics	Your computer	The log file Eivor.log is local. At each start the app sends version, operating system and number of accounts to Eivor's server so support and updates work.

Eivor's servers run in Microsoft Azure, region Sweden Central. The data controller is Power of Dreams AB. The legal text is on the Privacy page.