Privacy policy

1. What we collect

• Account data: name, email address, organization name, billing name and address.
• Email content: the messages and attachments stored in your mailboxes.
• Service records: sign-in times and IP addresses, sending counts, delivery logs and an activity log of admin actions.
• Payment records: invoices and payment references. Card details are handled by Stripe, and bKash payments (BDT only) by bKash — not by us.
• Messages you send us through the contact form or support email.

2. How we use it

• To deliver, store and send your email and run your account.
• To bill you and keep financial records required by law.
• To keep the Service secure: detect spam, abuse and hacked accounts.
• To answer your questions and tell you about important changes to the Service.

3. Your email content

Messages are processed automatically to deliver them and to filter spam and viruses. Our staff do not read your mail. Support staff may see message metadata (sender, recipient, time) to investigate a delivery problem you report, and we disclose content only when the law requires it.

The AI assistant is off until an owner of your organization turns it on. When someone uses it, the text needed for that request (for example the message to summarize) is sent to Google's Gemini API to produce the answer. We keep only usage counts, not the text or the answer.

If you use Marketing, our staff review your first campaigns before they are sent, to protect the shared sending reputation.

4. Who we share data with

Only with providers that help us run the Service, under contracts that protect your data:

• our data-centre and hosting providers (servers in the European Union),
• Amazon Web Services for delivering outgoing email,
• Stripe and bKash for processing payments,
• Google (Gemini API) for the optional AI assistant, only for organizations that turn it on.

5. How long we keep data

Mail is kept until you or your admin delete it. When an account closes, its mailboxes are deleted within 60 days. Invoices and payment records are kept as long as tax law requires. Logs are kept for up to 12 months.

6. Security

Connections are encrypted with TLS, dashboard passwords are stored only as secure hashes, access to systems is limited to staff who need it, and data is backed up regularly.

7. Your rights

You can see, correct, export or delete your personal data. Most of this is possible from the dashboard; for anything else, contact us and we will respond within 30 days.

8. Cookies

We use one essential cookie to keep you signed in. We do not use advertising or tracking cookies on the Service.