What we collect, why we collect it, and how long we keep it. Short version: as little as possible, for as short as possible.
Last updated: September 2026
We use personal data to operate and deliver the service, to bill you and prevent fraud, to keep the platform secure and free of abuse, and to answer your questions. From time to time we may tell you about product news; every such message includes a one-click opt-out.
We do not sell personal data. To anyone. Ever. And we do not use it for advertising.
Your messages are processed so that we can deliver them, then kept in your activity history for 45 days so you can search, debug and audit your sending. After that period we drop the subject and body and keep only delivery metadata — recipient, status and timestamps.
We never scan the content of your email to build profiles, and we never share it with third parties beyond what delivery strictly requires (receiving mail servers).
The website sets a small number of cookies: a session cookie when you sign in, a preference cookie for choices like staying signed in, and privacy-friendly analytics that we use in aggregate. We do not use third-party advertising or cross-site tracking cookies.
A small set of providers helps us run the service: a cloud hosting provider that stores our data, a payment processor for billing, and tooling for error monitoring and support. Each of them processes personal data only on our documented instructions, under a written data processing agreement. The current list of sub-processors is kept on our GDPR page.
Depending on where you live, you can ask to see the personal data we hold about you, receive a copy of it, correct it, restrict how we use it, or delete it. If you are in the European Economic Area or the UK, your rights under the GDPR are described in detail on our GDPR page.
Write to [email protected] from the address associated with your account. We respond within 30 days.
Personal data is kept while your account is open. When you close it, we delete identifiable data within 30 days. Some records — invoices and abuse-prevention logs, for example — are kept longer where the law requires it, and backups roll off automatically within 90 days.
Questions, requests or complaints about privacy: [email protected]. We read everything.