1. That the only data collected by Incredimail is what they say they collect:
Since they openly admit they collect some information about the email you send, including the number of emails you send, time and date, etc. that means a data collection and transmission mechanism is installed. Theoretically, with such a link between your computer and their server they could collect any information you enter into you email program including the contents of your email message. We're not saying they will do this, we're saying when tracking mechanisms are installed the instrumentality for tracking is in place.

2. The data that is collected may be stored on servers located in the country in which Incredimail is based
This means your data, while collected in the United States, Britain, Australia, or wherever you live is transmitted to and stored on servers located in Israel. Are you familiar with the privacy and security laws in Israel? Are they more strict or less strict than your country?

Incredimail is located in Israel (with an "office" in New York). If Israel is not where you live and you're not familiar with the security and privacy laws in the country where your information is being stored and "processed", you should consider carefully whether you want to agree to the collection and storage of ANY information from you.

We do not agree with some of their marketing techniques. For example, when you visit their main site, there is no indication that there is anything to pay for. They don't indicate that the "free" version of Incredimail is adware; they don't indicate that the free version of Incredimail inserts a rather ugly advertisement at the bottom of every email you send (but you don't see it, only your recipient does). They make claims on their site that are not substantiated in the "Full Privacy Policy" which contains several questionable clauses like the one below:

"CONSENT TO PROCESSING
Users, including without limitation, Users in the European Union, fully understand and unambiguously consent to the collection and processing of their personally identifiable and non-personally identifiable information, in the United States. "

While this questionable clause appears in their "full privacy policy" it does not appear in the short "Summary Privacy Policy" and is contradictory to their claim that they do not collect any personally identifiable information. One wonders why they go to great lengths to bury this clause deep in their full privacy policy.

See for yourself -

Here's a link to their "Summary" Privacy Policy

Here's a link to their "Full Privacy Policy"

You will notice that the "summary Privacy Policy" is approximately 777 words long and tells you what you want to hear. The "Full Privacy Policy" (the actual legal agreement you're bound to) is over twice as long and full of legalese. Remember you're legally bound to the conditions set forth in the long (full) version and to the End User License Agreement (not posted on their Web site). You have to ask yourself if their content is so good as to warrant risking your personal and non-personal information to them without knowing exactly what they mean by "process your personal and non-personal information". As their policy reads at this time, they could do anything they wish with any information gathered from you and comply with all legal requirements. How? Because by installing Incredimail, you agree to be bound by the terms set forth in their Privacy Policy and EULA. You would not have any legal recourse no matter what they did with your information.