Privacy Policy

Account information: your name, email address, company name, and login credentials (passwords are stored only as salted hashes, never in plain text).

Email content: the messages, threads, contacts, and attachments in your mailboxes. We store these so we can deliver and display your mail — that is the core of the service.

Deliverability and operational data: sending logs, delivery/bounce events, DMARC aggregate reports, and sending-IP reputation signals we use to keep your mail landing in the inbox.

Basic usage and device data needed to operate and secure the app.

To provide the service: send, receive, store, thread, and display your email, and manage your domains and mailboxes.

To protect deliverability and prevent abuse: monitor for spam, compromise, and sending anomalies across our shared infrastructure.

To support you and communicate essential account, security, and billing notices.

We do not sell your data, and we do not read your email except as required to operate the service, prevent abuse, or comply with law. We never use the content of your email to train advertising or unrelated models.

Payments are handled by Paddle.com, our merchant of record. Paddle processes your card and billing details directly — we never see or store full payment card numbers. Paddle's handling of your data is governed by its own privacy policy.

We use a single, essential signed session cookie to keep you logged in. We do not use third-party advertising or cross-site tracking cookies.

We rely on a small set of providers to run the service:

Hosting: our mail server, application, and database run on dedicated cloud infrastructure we operate.

Billing: Paddle, for payments and tax.

These providers process data only to provide their service to us, under contract.

We keep your data for as long as your account is active. When you close your account we will, on request and where feasible, provide a window to export your mail, then delete your content within a reasonable period, except where we must retain records to comply with law.

We protect data in transit with TLS and apply access controls, credential hashing, and monitoring. No system is perfectly secure, but we work to safeguard your data and to isolate each customer's mail.

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. You can exercise these from within the app or by contacting us.

Your data may be processed in the countries where our infrastructure and providers operate. Where required, we use appropriate safeguards for international transfers.

For privacy questions or to exercise your rights, email us at privacy@supermailos.com.