Privacy Policy

We collect information you provide directly when you create an account, add a domain, create mailboxes, send emails, or contact us for support.

Account data: name, email address, password (hashed), billing information, and company name.

Usage data: log data including IP addresses, browser type, pages visited, features used, timestamps, and crash reports.

Email data: metadata and content of emails sent through or received by DevMail (subject lines, sender/recipient addresses, timestamps). We process email content only to deliver the service and do not use it for advertising.

Domain and DNS data: domain names you add, DNS records we generate, and verification status.

Payment data: billing address and card details. Card numbers are processed directly by our payment processor (Stripe) and never stored on our servers.

We use collected information to:

- Provide, operate, and improve the DevMail platform. - Process transactions and send transactional emails (receipts, invoices, alerts). - Respond to your support requests. - Monitor for abuse, fraud, and violations of our Terms of Service. - Send product updates, security alerts, and service announcements (you may opt out of non-essential communications). - Comply with legal obligations.

We do not sell your personal data to third parties. We do not use your email content for advertising purposes.

We share data only in the following circumstances:

Service providers: We share data with vendors who help us operate the service (e.g., AWS for cloud infrastructure, Stripe for payments, Clerk for authentication). These vendors are contractually obligated to protect your data.

Legal compliance: We may disclose data when required by law, court order, or governmental authority, or to protect the rights, property, and safety of DevMail, our users, and the public.

Business transfers: If DevMail is acquired or merges with another company, your data may be transferred as part of that transaction. We will notify you before your data is subject to a different Privacy Policy.

We do not share your email content with advertisers or analytics companies.

We use cookies and similar technologies to:

- Keep you logged in (essential session cookies). - Remember your preferences. - Understand how users navigate the product (analytics).

You can control cookie settings through your browser. Disabling cookies may affect some product features. We do not use third-party advertising cookies.

We retain your data for as long as your account is active or as needed to provide services. If you delete your account:

- Account data is deleted within 30 days. - Email data is deleted within 60 days (some may persist in backups for up to 90 days). - Billing records are retained for 7 years as required by financial regulations.

You can request earlier deletion of specific data by contacting privacy@devmail.app.

We protect your data with:

- TLS/HTTPS encryption for all data in transit. - AES-256 encryption for data at rest. - Access controls limiting staff access to user data on a need-to-know basis. - Regular security audits and penetration testing. - Automatic backups with point-in-time recovery.

No method of transmission or storage is 100% secure. If you discover a security vulnerability, please report it to security@devmail.app.

Depending on your location, you may have the following rights:

- Access: Request a copy of personal data we hold about you. - Correction: Request correction of inaccurate data. - Deletion: Request deletion of your account and associated data. - Portability: Request an export of your data in a machine-readable format. - Objection: Object to certain processing activities. - Withdrawal of consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, email privacy@devmail.app. We will respond within 30 days.

EEA/UK residents: DevMail processes data under GDPR. Our legal bases include contract performance, legitimate interests, and consent.

California residents: Under CCPA, you have additional rights including the right to know what data is sold or shared (we do not sell personal data).

DevMail is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal information, contact us at privacy@devmail.app and we will delete it promptly.

We may update this Privacy Policy periodically. We will notify you of material changes by email and by posting a notice on our website at least 30 days before the change takes effect. Continued use of the service after changes take effect constitutes acceptance of the revised policy.

For privacy-related questions or to exercise your rights, contact:

DevMail Privacy Team privacy@devmail.app

We aim to respond to all privacy inquiries within 30 days.