Privacy Policy

1. Information We Collect

When you use mailservr, we collect the following information:

• Account data: Username, hashed password, and account settings
• Email content: Emails received by and sent from your aliases, including attachments
• Payment information: Processed securely through Stripe. We store your Stripe customer ID and payment status but do not store credit card details
• Usage data: Email counts, storage usage, and general service usage metrics

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the mailservr service
• Process payments and manage your account
• Deliver emails to and from your aliases
• Enforce our Terms of Service and prevent abuse
• Improve the service and develop new features

3. Email Content

Email messages and attachments sent to your aliases are stored on our servers to provide the service. We do not read, analyze, or sell your email content. Email data is only accessed when necessary for service operation or when required by law.

4. Data Storage & Security

Account data is stored in a PostgreSQL database. Email attachments are stored in encrypted cloud storage (Cloudflare R2). Passwords are hashed using bcrypt. Session tokens are used for authentication with automatic expiry. We implement reasonable security measures to protect your data, but no method of transmission or storage is 100% secure.

5. Third-Party Services

We use the following third-party services to operate mailservr:

• Stripe: Payment processing
• Resend: Outbound email delivery
• Cloudflare R2: File and attachment storage

Each of these services has their own privacy policies governing how they handle data.

6. Data Retention

Your account data and emails are retained for as long as your account is active. If you delete your account, your data will be removed from our active systems. Some data may be retained in backups for a limited period as part of our standard backup procedures.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Export your data

You can exercise these rights through your account settings or by contacting support.

8. Cookies

mailservr uses a session cookie (session_token) to keep you logged in. This is a functional cookie required for the service to operate. We do not use advertising or tracking cookies.

9. Children's Privacy

mailservr is not intended for use by children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of the service after changes constitutes acceptance of the revised policy.

11. Contact

If you have questions about this Privacy Policy, please contact us through your account dashboard or email support.