Pre-launch

Revoke access and delete data

There is currently nothing to revoke from J.SCEW. No Yahoo application has been approved, no OAuth credential has been issued to J.SCEW, and no Yahoo mailbox is connected. The steps below describe the user-controlled path required before any future live version.

Revoke mailbox access independently

Use J.SCEW's disconnect control if a future version provides one. That control is not yet implemented or available.
Revoke authorization at the mailbox provider. Do this from the provider's official account-security or connected-app settings so revocation does not depend on J.SCEW being online.
Confirm monitoring has stopped. A future version must show loss of authorization without continuing to ingest mail or silently reconnecting.

For Yahoo, begin from Yahoo Account Security and review connected apps or app permissions. Interface names may change; use only an official yahoo.com page. If an app-specific password was ever created separately, delete it there as well.

Provider revocation stops future mailbox access. It does not by itself prove deletion of privacy-minimized operational records already held by an application.

Request deletion of J.SCEW data

Revoke provider access first.
Send a deletion request to privacy@jscew.com.
Do not include passwords, tokens, recovery codes, message bodies, or attachments.
After safe identity verification, the planned process is to stop ingestion, remove provider checkpoints and operational/audit records, and expire matched backups under the approved schedule.
Record completion without retaining mailbox content.

Requests will be acknowledged and resolved within 30 days unless applicable law requires a shorter period or a disclosed legal or security exception applies. Active operational records are otherwise retained for no more than 30 days, and covered backups expire no later than 30 days after deletion from the active system.

What revocation and deletion mean

Revocation: Stops the authorization used for future mailbox reads.
Disconnection: Stops J.SCEW processing; it must not restore a revoked capability automatically.
Deletion: Removes J.SCEW-held operational records and expires covered backups according to the approved schedule, subject to disclosed legal or security exceptions.
Mailbox messages: Remain in the provider mailbox because the first version is not designed to delete or move them.

Need help?

See the support page and the privacy policy. If account compromise is suspected, use the provider's official security controls immediately.