Proton says it cannot decrypt encrypted messages, files, or notes

Proton says it lacks the technical means to access the content of encrypted emails, files, calendar events, passwords, or notes.

Proton Mail can see metadata and scans some unencrypted messages

Proton can see listed email metadata and scans some unencrypted messages to or from external services for spam and viruses.

The scanning described applies to messages arriving from external providers or sent to external unencrypted email services; the policy says encrypted message content is not accessible to Proton.

If you submit Apertus feedback, it may reach ETH Zurich and EPFL

An anonymized prompt, Lumo response, and feedback may be shared with ETH Zurich and EPFL for evaluation, safety work, improvement, or training.

This applies only if you submit feedback for the Apertus model.

If enabled, Lumo sends a simplified query to partner APIs

Lumo may send a simplified version of your request to selected APIs for Web Search; its policy says the full query is not shared and the feature can be disabled.

This applies when you use Lumo with Web Search enabled.

If you connect Gmail, Google can see some messages you send

With Gmail connected, messages sent to non-Proton addresses pass through Gmail unencrypted, so their content is visible to Google.

This applies when you connect a Gmail account and send messages to non-Proton connected addresses; the policy says connecting Gmail does not give Google access to your Proton Mail inbox.

Lumo's no-use promise conflicts with feedback reuse

If you submit feedback, the privacy policy allows anonymized prompts and replies to help improve the model, despite the terms' no-use promise.

This tension arises only if you choose to submit feedback; the texts do not say whether that material is outside the terms' definition of content.

Lumo's terms say you own its AI-generated outputs

The terms say you retain rights in inputs and own outputs, though other users may receive similar output from the service.

Free accounts inactive for 12 months may lose stored data

Proton may delete a free account and some or all associated data after 12 months of inactivity; advance warnings are only an aim, not a firm promise.

This applies to free accounts; ending a paid subscription or being downgraded to free makes the account subject to the inactivity rule again.

Proton does not promise to retain content after account termination

If an account is terminated, Proton says it has no obligation to store or forward that account's contents.

This applies if an account is terminated; the terms state no retention obligation but do not specify that content is deleted immediately.

The terms seek individual arbitration and a class-action waiver

The terms seek to require individual arbitration for most disputes and waive class participation, but allow a written opt-out within 30 days of first agreeing.

The terms provide a 30-day written opt-out; opting out of arbitration alone leaves the class-action waiver in place.

Paid plans renew automatically and may cost more at renewal

A paid subscription renews for its selected term unless canceled or changed, and Proton may charge its then-current price at renewal.

This applies if you choose a paid subscription; renewal duration depends on the selection made at purchase.

Paid-plan refunds are limited after the first 30 days

For direct purchases, both cancellation and a refund request must be made within 30 days; afterward, refunds are discretionary and the option is limited to once per user.

This applies to a paid subscription; the stated refund option is for direct Proton purchases, and both cancellation and the request must fall within the 30-day period.