Privacy Policy

We collect the information needed to provide and secure a paid email service. Depending on the features you use, this may include account details, mailbox address, verified recovery details, subscription and entitlement state, security events, device and session information, support correspondence, and mailbox usage measurements.

Payment card details are handled by the configured payment provider. Mail Service does not store full card numbers or card security codes.

• Account and recovery details you submit
• Service, security, and audit events
• Plan, payment status, and mailbox entitlement
• Technical data needed to prevent abuse and maintain sessions

Information is used to operate the service, authenticate users, provision mailboxes, process subscriptions, provide support, prevent abuse, meet legal obligations, and improve reliability.

Mailbox information is not used to build advertising profiles, and the service is not funded by selling personal data.

Information may be shared with infrastructure, payment, email-delivery, security, or support providers only when needed to provide the service. Providers are expected to process information under appropriate contractual and security controls.

Information may also be disclosed when required by applicable law, to protect users or the service, or as part of a legitimate corporate transaction with appropriate safeguards.

Data is retained only for as long as needed for the service, security, billing, dispute, and legal purposes that apply to it. Different records have different retention periods.

Security controls include authenticated transport, access controls, token hashing, bounded sessions, and authenticated encryption for secrets that must be recovered. No system can guarantee absolute security.

You may review or update available account details, manage active sessions, and request applicable privacy actions. Some records may need to be retained for fraud prevention, billing, dispute, or legal obligations.