Just like regular email in that sense. We don't do any encryption beyond standard HTTPS and we don't look at the data. It's a paid service, you're not the product.