Security and trust
Your inbox is yours. We keep it private.
Small-business owners do not want a black box. They want to know what happens to customer emails, who can see them, and how much control they keep. Here is the plain-English version.
We do not sit reading through your inbox
Space Cake looks at incoming customer messages only so it can help with replies. Your inbox is not treated like something for our team to browse.
Inbox credentials are encrypted
Your business inbox connects over encrypted channels, and the details needed to connect are stored in encrypted form.
Each business is isolated
One business cannot see another business’s emails, drafts, customer records, saved facts, or billing details.
Attachments are not stored
Attachment files are not kept on our servers. We only keep basic metadata such as filename, type, and size.
Your messages do not train public AI models
Customer emails stay your business data. They are not fed into public model training.
UK GDPR paperwork is available
You remain in charge of your customer information. Space Cake provides a Data Processing Agreement for the legal detail.
You can export or delete your data
If you need your records out or want the account removed, you stay in control of that decision.
What that means day to day
The important thing is simple: Space Cake should make customer email feel calmer without making your business feel out of your hands. These controls are available on every plan.
You can pause sending
If you want a quiet moment to check things, one tap pauses outgoing replies while keeping your inbox connected.
You can see what happened
Sent replies, drafted replies, and messages that need you stay visible so you are not asked to trust a mystery box.
You can leave cleanly
You can cancel, export your records, or ask for account deletion without being locked into a long contract.
Data protection and UK GDPR
We are a UK-based business and built Space Cake around UK GDPR from day one. You remain the data controller for your customers’ information. Space Cake acts as your processor so it can handle your customer emails on your behalf. The legal detail is available in the Data Processing Agreement and the Privacy Policy.
This applies whatever your business handles — including practices like vets, dentists, and clinics — the same encryption, isolation, and export-or-delete control described above cover every account equally. You stay responsible for your own sector's professional and regulatory obligations; we are a processor, not a substitute for those.
Still have a question?
Use the help centre and we will answer plainly.