Legal
Privacy Policy
Effective September 29, 2026
What we collect
We store account details, inbox configuration, API and webhook metadata, service logs, and inbound email content needed to provide the service. Inbound data can include envelope and header fields, subject, text and HTML bodies, extracted one-time passcodes, and the original raw message bytes.
Why and how long
We process this data to receive, parse, secure, and deliver email through the API. A scheduled purge permanently deletes committed messages from the live database after the applicable plan window: 1 day for Free accounts and 7 days for Paid accounts. Database backups may retain deleted messages for up to 14 days, and undelivered mail may remain in the mail queue for up to 5 days, before final deletion. Operational and account records may be kept longer where needed for security, billing, legal obligations, or dispute handling.
Location and service providers
The service and its PostgreSQL data are hosted on Hetzner infrastructure in Germany, in the European Union. We may use limited providers needed for hosting, DNS, email delivery, and service operations, subject to appropriate safeguards.
Your choices
You may request access, correction, or deletion of your account data, subject to legal and security requirements. Contact [email protected]; until a separate privacy mailbox is configured, this monitored address also handles privacy requests.
Security and contact
We use access controls, encryption in transit, and data-minimization measures, but no online service can guarantee absolute security. Report privacy or abuse concerns to [email protected].