Introduction
These additional terms and this privacy information apply to Webhuset Mail, in addition to Webhuset's General Terms and Privacy Policy. If they conflict, this page applies to Webhuset Mail. This is a translation; if the English and Norwegian versions differ, the Norwegian version applies.
Part A – Privacy in Webhuset Mail
Webhuset Mail and connecting AI services
Webhuset Mail is our email app for the web and mobile. When you use it, we also process:
- Signing in to Webhuset Mail: username (email address) and password. The password is stored only as a one-way hash that cannot be turned back into the password.
- The sign-in details of the email accounts you add: username and password for the email account. The password is encrypted with a separate key for each account, and that key is in turn encrypted with a master key in a separate key service. The password is decrypted only at the moment the app signs in to the email server for you.
- Email shown in the app: a copy of recent emails (sender, recipients, subject and content) is stored temporarily so the app is fast. The email account itself stays on Webhuset's email servers.
- What you do in the app: which conversations you have marked as done or snoozed, drafts and signatures.
Connecting AI services (ChatGPT from OpenAI and Claude from Anthropic). You can choose to give an AI service access to one or more of your email accounts. When you do:
- You choose which accounts the AI service may use, and whether it can only read and search, or also save drafts. The AI service cannot send email on your behalf.
- The AI service never gets the password to your email account. It gets an access key that works only for what you have approved, and which you can withdraw at any time under Settings → Connected AI apps.
- When you ask the AI service for something, we send it the email it needs to answer you (for example sender, subject and content). From then on, the AI provider's own terms and privacy policy apply, and the provider processes the data outside Norway and the EEA. Webhuset is not responsible for how the AI provider processes the information.
- We keep a log of every request from an AI service: which service, which account, what kind of request and when. The log does not contain email content and is deleted after 12 months. You can see the log under Settings → Connected AI apps.
Where the data is stored. Webhuset Mail is hosted with Google Cloud in Stockholm, Sweden (EU/EEA). Google is our data processor for this service.
Deletion. If you remove an email account from the app, the password and the stored copy of the emails for that account are deleted. If you disconnect an AI service, its access stops working immediately. If you delete your Webhuset Mail user, all the information above is deleted, including the log.
Part B – Additional terms for Webhuset Mail
a) Webhuset Mail gives access to email accounts on Webhuset's email servers. Connecting AI services is available only for email accounts on Webhuset's own email servers.
b) The Customer decides whether, and to which AI services, email accounts are connected, which accounts are shared, and whether the AI service can only read or also save drafts. The AI service cannot send email.
c) When the Customer connects an AI service, the Customer enters into a separate agreement with the provider of the AI service (for example OpenAI or Anthropic). Webhuset is not a party to that agreement and is not responsible for the AI service's answers, availability or processing of information.
d) The Customer is responsible for ensuring that sharing email with an AI service complies with the law and with agreements that apply to the content, for example confidentiality obligations or agreements with the Customer's own customers.
e) The Customer can disconnect an AI service at any time in Webhuset Mail. Webhuset may suspend access for an AI service if misuse, a security breach or a breach of the Agreement is suspected.
f) If the password for an email account is changed, the new password must be entered in Webhuset Mail before the app and connected AI services can use the account again.