| > We keep a database of a user’s email messages locally on such user’s computer. Such database is encrypted with a machine-dependent key. We do not store passwords from a user’s email accounts if the user used OAuth2 to login into those email accounts (Gmail, G Suite, Office 365 all use 0Auth2). However, we do store passwords from email accounts that do not support OAuth2. We encrypt such passwords two times. One suggestion here - a lot of email clients these days store credentials or oauth2 keys server-side. From your website it suggests Scailer aren't doing this ("Scailer does not store email messages or sensitive information on third-party servers, including Scailer servers.") The above section of the privacy policy suggests that does happen, however it isn't clear if that's offline or online. It might be possible to word the policy to better reflect whether credentials are shared with the server or not - there's an opportunity for more "all client side" email clients that don't breach policy by giving a third party server access to account data. I ran the app on Mac, straight from the DMG (noticed that it is Electron-based, so not native on the M1). As soon as I ran it, the first thing I saw was a prompt to allow incoming network connections from the firewall. The second thing I see is a little snitch prompt to connect to scailerservice.azurewebsites.net, before I've even seen the app(!) I deny that for the moment, then get told my trial has expired, and I need to buy a business licence. I've never heard of Scailer before, and definitely haven't used a trial before. I assume this is due to running it from App Translocation (i.e. straight from the DMG), or that first network request being denied. The link to buy a license then didn't appear to do anything. In the settings menu (which I somehow got to by clicking activate), I went to general settings, and tried turning off auto download avatars and error reports. Each time I leave the tab, the setting doesn't save by default. Eventually I spotted an "apply changes" button tucked away at the bottom right (of a full-screen window by default). I attempted to add a new IMAP account (fairly standard Dovecot setup), but got an IMAP connection test failure, apparently with status 3, "invalid command". Digging through the logs, it looks like the issue is something to do with the ID command being sent: C: xxxxx CAPABILITY
S: * CAPABILITY IMAP4 IMAP4rev1 UIDPLUS SASL-IR LOGIN-REFERRALS ID ENABLE IDLE LITERAL+ AUTH=PLAIN
xxxxx OK completed C: xxxxx ID ("vendor" "Scailer.Mac" "name" "Scailer.Mac" "version" "1.0.172.0" "contact" "scailer.alerts@slcode.com")
S: xxxxx BAD invalid command
S: * OK IMAP4 ready I don't want to sound negative - just sharing a first-run experience from double clicking the .app inside the DMG as a new user. |
We have not tested the work of the application directly from DMG. Probably this is the reason why it says that the trial period is expired. Try to copy it in Applications.
Scailer connects to scailerservice.azurewebsites.net to check for updates. This is Scailer service for updates hosted on Microsoft Azure. And also Scailer connects to scailerservice.azurewebsites.net to get avatars of contacts. Users can turn off connection for avatars on the welcome screen or in preferences.
What version of dovecot do you use? Is this your installation or mail provider?