The short version
Effective November 14, 2026. iCapSolutions (“we”) makes iCap Inbox Assistant, an add-on for Mozilla Thunderbird. This policy covers the add-on and the iCap service it talks to. Our main privacy policy covers icapsolutions.com and iCap SEO.
The free features run entirely on your computer and send nothing anywhere. Optional AI review sends a short, redacted excerpt of a message to our server only when you click an AI button, or when you turn on the automatic second opinion. We don’t sell data, show ads or use your mail to train AI.
Free features (no account)
Junk review, the Check button and the local checks read your messages inside Thunderbird to score them. Results and settings are stored in Thunderbird’s local storage on your computer. Nothing is sent to us or anyone else.
AI review (optional, needs an account)
You turn it on by signing in with your email address and granting the add-on permission to reach inbox-api.icapsolutions.com. After that:
- When data is sent: only when you click an AI button (Is this legit?, Ask AI, AI sweep, Summarize, Draft reply, Suggest folder), or for new Inbox mail the free checks call suspicious if you turn on the automatic second opinion, up to the daily limit you set.
- What is sent, per message: the sender’s name and address, a different reply-to address if there is one, the subject, the first 2,000 characters of the text, the domains its links point to (up to 15, without the full links), the names and types of up to 10 attachments, and the add-on’s own findings. For Draft reply, any note you type (up to 500 characters). For Suggest folder, the names of your folders (up to 200).
- Removed before sending: your own name and email addresses, one-time codes, and long numbers such as phone, account and card numbers (only the last 4 digits are kept).
- Never sent: full messages, full links, attachments, your address book, or mail you didn’t ask about.
- Processing: our server passes the excerpt to Anthropic’s Claude model, through Claude Platform on Amazon Web Services in the United States, and returns the answer to the add-on. We don’t store the excerpt or the answer on our server. Anthropic doesn’t use this data to train its models. Under its commercial terms, Anthropic deletes API inputs and outputs within 30 days, except content its safety systems flag for a usage-policy review (kept up to 2 years) or data the law requires it to keep.
- Kept on your computer: AI answers for up to 500 messages, so you aren’t charged twice for the same message.
Your account
We store your email address, your credit balance, and a history of credit use: the date, the kind of action, the credits, and how many messages it covered, with no message content. We store sign-in tokens and account keys only as one-way hashes. Sign-in codes expire after 10 minutes. To limit abuse, we keep short-lived counters keyed to hashed email and network addresses.
Payments
Credits are bought on Stripe’s checkout page in your browser. Stripe handles your card details; we never see them. Stripe tells us which account and credit pack was paid for. Stripe’s privacy policy covers what it collects.
Sign-in codes are sent by Amazon Simple Email Service. We don’t send marketing email from the add-on.
Logs
Our server keeps operational logs for 30 days to find errors. They don’t contain message excerpts or AI answers.
Your choices
You can use every free feature without an account. You can turn off the automatic second opinion at any time. You can sign out, which ends that computer’s session. You can delete your account on the add-on’s AI review page; this deletes your account, its history and any unused credits right away. Removing the add-on deletes everything it stored on your computer.
Children
The add-on isn’t directed at children under 13.
Changes to this policy
We’ll post changes here and update the effective date. Changes to what is sent will also be noted in the add-on’s release notes.
Contact us
Questions about this policy or your data: support@icapsolutions.com.
iCapSolutions
PO Box 3086
Manhattan Beach, CA 90266
United States