Privacy policy

Last updated: 6 November 2026

Jolta is an MIT-licensed email and calendar application created by Layer7 BV, Belgium, VAT BE0830063345 ("we", "us"). This policy explains how Jolta handles information when you connect your accounts, and how we handle information you send us. Contact us at hello@jolta.app.

Jolta’s source code is publicly available on GitHub for anyone to inspect.

1. Your accounts and the data Jolta accesses

You choose which accounts to connect: Microsoft 365, iCloud, Gmail, Google Workspace, other IMAP mailboxes, and supported calendar accounts. Depending on the account and permissions you grant, Jolta accesses your account identity (such as your email address), email messages and headers, attachments, folders and labels, and calendar information including events, attendees and event details. It also uses authentication tokens or credentials needed to maintain your connections.

Jolta uses this information only to provide the email and calendar features you use: displaying and synchronising mail and events, sending messages, organising or deleting mail, and creating, updating or deleting calendar events when you ask it to. The provider's authorisation screen describes the permissions requested. You can choose not to connect an account.

2. Direct connections and local storage

Jolta connects directly from your device to the providers you configure. Registering Jolta as an OAuth application with Google or Microsoft enables you to authorise your installed app to access your account; it does not send your account data to Layer7 BV. Your installed app receives the authorised data directly from your provider. Layer7 BV does not receive that data or operate application servers that receive, relay or store your mailbox contents, calendar data or account credentials. The app processes data on your device and may retain local copies and authentication information to support your connected accounts. Your providers continue to store and process account data under their own policies.

Local application data is subject to your device's security, backup and storage settings. Messages you send, invitations you issue, and changes you make are transmitted to the relevant provider and recipients as part of the action you request.

3. Google user data and Limited Use

Jolta's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Your installed copy of Jolta accesses Google user data directly from Google and uses it on your device only to provide the email and calendar features described above, and the optional AI features in section 4 when you turn them on. Layer7 BV does not receive or have access to this data through your use of Jolta. Jolta does not sell this data, use it for advertising, or use it to train general-purpose AI or machine-learning models. It is not included in telemetry. The installed app communicates directly with Google and transfers data only as needed to carry out your requested email and calendar actions, such as sending a message or inviting an attendee, or to the AI provider or agent you choose in section 4, only to provide that feature to you.

4. Optional AI features and agents

Jolta's AI features, such as summaries, writing help and sorting new mail, are off until you choose a model in Jolta's settings. If you choose a model that runs on your device, your mail stays on your device. If you choose OpenAI or Anthropic and enter your own API key, Jolta sends the content a feature needs, such as the conversation you summarise or reply to, including the summaries Jolta makes as you open a long conversation if you leave that on, directly from your device to that provider under your account and its terms. If you turn on sorting with such a provider, each new message is sent to it once. This data does not pass through Layer7 BV.

You can also connect an AI agent of your choice to Jolta through its local MCP server. A connected agent can read, search and organise your mail and create drafts; it cannot send mail. Jolta logs every agent action and lets you pause all agents. The agent and its provider handle what it reads under their own terms.

You can turn these features off or disconnect an agent at any time. Jolta does not use your data, including Google user data, to develop, improve or train AI or machine-learning models.

5. Updates and telemetry

Jolta checks jolta.app for updates about once an hour. Each check is an ordinary web request that includes your IP address and the Jolta version, and appears in the website's access logs described in section 6. Jolta does not collect telemetry. If we add anonymous technical telemetry later, it will be optional, it will never include message contents, calendar contents, account credentials or Google user data, and we will update this policy before it starts.

6. Contacting us and visiting this website

If you email us, we receive your email address, your message and anything you choose to include. We use that information to respond to you and handle your request, based on our legitimate interest in providing support, or to take steps at your request before entering into a contract. Our email provider processes that correspondence. Please avoid sending passwords, tokens or unnecessary mailbox contents.

Visiting this website does not use or set cookies. The website does not use third-party trackers, tracking scripts or analytics services. Serving and securing the website may involve ordinary hosting access logs, including IP address, request details and time, processed by the website hosting infrastructure for the legitimate interest of operating and protecting the site. The absence of application servers does not mean the website, our support mailbox or your account providers operate without servers.

7. Retention, disconnection and deletion

Your provider retains account data under its own rules. You can disconnect an account in Jolta and revoke its access in your provider's account settings. For Google, visit your Google Account connections. Revoking access prevents future authorised access; it does not delete messages or events at your provider, or automatically erase copies already stored on your device.

To erase local copies, remove Jolta's local application data and any relevant device backups. Uninstalling alone may not remove all application data or backups. We have no server-side mailbox copy to delete. Support correspondence is kept only as long as needed to resolve the request and meet applicable legal obligations; website logs are kept only as long as needed for operation and security.

8. Your rights

Where we process personal data, Layer7 BV is responsible for that processing. Subject to applicable law, you can request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it at any time without affecting prior lawful processing. Contact hello@jolta.app to exercise your rights. For data held by your mailbox or calendar provider, contact that provider.

You may lodge a complaint with the Belgian Data Protection Authority or your local supervisory authority.

9. Changes to this policy

We will publish updates here and revise the date above. Material changes will be communicated through an appropriate notice. Before changing how the installed app accesses or uses Google user data, we will disclose the change and obtain any required consent.