The mail is encrypted, so probably not, but they have an extensive privacy policy and some blog entries, against which threats they can protect you, which they can’t