What Espa does with your messages
Source: its published policy, read 2026-09-13. Its words are quoted, never paraphrased.
Whose hands it passes through
Somebody carries the message, somebody runs the model that reads it, and where the agent uses a website on your behalf somebody operates that browser. A blank below is not an absence of a company, it is a company nobody has named.
- iMessage, SMS, WhatsApp, Email
- Espa Labs, Inc.
- Not named
- OpenAI, Anthropic, Google
- Not named
- Not stated
In its own words
“These providers operate under Zero Data Retention commitments: they must not train on your data and must delete data after processing and a safety/abuse monitoring window.”
What it does not answer
Each of these is a question some policies in this directory answer. The count is how many of the 66 we have read close it.
- the people in your threads who never signed up
- where to report a hole
Silence is not a denial and it is not a promise. A document that does not address the people in your group thread has not agreed to anything about them.
How old this document is
Espa last revised it on 2026-03-03, which was 194 days before we read it. 61 of the 66 policies here carry a revision date at all; the rest do not say when they were last changed, so there is no way to tell whether they describe the product as it ships today.
We started keeping a dated copy of this document on 2026-09-13. A policy that is quietly rewritten leaves nothing behind, so from here any change to it is recorded with the date it appeared.
Who else answers this the same way
The products that gave the same answer, each on a page like this one.
Read next