Tuta follows EU privacy rules and stores all your data on its own servers in Germany. The company doesn't log your IP address by default, so it holds very little data about you. Your email content, subject lines, contacts, and calendar are all encrypted so nobody can read them. Metadata like sender and recipient addresses isn't encrypted because the email protocol needs it to deliver messages. Tuta offers a data processing agreement for businesses.