When they receive an email, they encrypt it with your public key. The private key is stored on their server encrypted with a passphrase only you know.
Assuming they don't backdoor their client to find out your passphrase, or log emails as they receive them, you're fairly safe from having an employee browse through your emails.
