Privacy Policy

1. Data We Collect

Username, recovery email, email messages (HII format), API keys (SHA256 hashed), and custom domain records.

2. How We Use It

To provide the email service, deliver messages, and enforce rate limits. We do not sell your data or use message content for advertising.

3. Data Storage

Messages are stored in SQLite. Outbound email is relayed through AWS SES. Inbound email passes through AWS S3 temporarily during processing.

4. Third Parties

AWS (email delivery), Cloudflare (DNS/CDN), Stripe (payment processing for Pro plan). No analytics or tracking services.

5. Security

Authentication uses email-based one-time codes. No passwords stored. API keys are SHA256 hashed. Sessions use signed tokens. All traffic is encrypted via TLS.

6. Your Rights

You can export your messages via API, delete your account, or request data deletion by contacting us.

7. Contact

For privacy inquiries: [email protected]