Privacy Policy

This policy explains what data Vaultmail collects, why, how long it is kept, and the rights you have over it.

1. Data we collect

• Account data: your email address and authentication details.
• Order and billing data: purchases, prepaid balance ledger, and payment records.
• Message data: emails received by the addresses you purchase, so you can read them.
• Technical data: IP address, request logs, and security events.

2. Legal bases

We process data to perform our contract with you (providing the service), to comply with legal obligations, and for our legitimate interests in operating and securing the service.

3. Retention periods

Account and billing records are retained for as long as your profile is active and for any period required by law. Message data is retained while the associated address is active and is removed on request or when the address is no longer available. Security logs are kept for a limited period appropriate to their purpose.

4. Processors

We rely on the following categories of processors to deliver the service:

• Hosting provider: infrastructure hosting.
• OxaPay: cryptocurrency payment processing.
• Microsoft: the upstream email provider for message delivery.
• Email provider: transactional email such as verification and notifications.
• OAuth providers: Google and GitHub sign-in, when you choose to use them.

5. Your rights

Subject to applicable law, you have the right of access, rectification, erasure, portability, and objection regarding your personal data. To exercise these rights, contact us through the support channel in your dashboard.

6. Cookies

We use essential cookies only. See the Cookie Notice for details.

7. Contact

For privacy questions or requests, use the support channel in your dashboard. Contact details for the data controller are provided there.