Privacy Policy

Account information: When you register, we collect your name (optional) and email address. We store your account password as a secure hash — never in plaintext.

Purchase information: When you buy an email account, we record the username you chose, the plan you purchased, the amount paid, and the transaction reference. We do not store your card details — payment is processed entirely by Flutterwave.

Email mailbox data: The contents of your email inbox (messages, attachments) are stored on our mail servers in your private, isolated mailbox. We do not read, scan, or share the contents of your emails.

Usage data: We may collect basic server logs including IP addresses and request timestamps for security monitoring and abuse prevention.

• To create and manage your account and email mailboxes
• To process payments and send purchase confirmations
• To respond to your support requests
• To detect and prevent fraud, abuse, or security threats
• To send important service notifications (e.g. billing reminders)

We do not sell your personal information. We do not use your data for advertising.

We share your information only with the third parties necessary to provide the service:

• Flutterwave — payment processor. Your payment details are handled entirely by Flutterwave under their own privacy policy. We receive only a transaction reference and status from them.
• Our mail hosting provider (cPanel reseller host) — your email mailbox is hosted on a third-party server. They provide the infrastructure but do not have access to your credentials or the authority to access your mailbox content under normal operations.
• Supabase — our database provider. Your account and order data is stored in their secure PostgreSQL database under their data protection terms.

We may also disclose information if required by law, court order, or to protect the safety of our users or the public.

We retain your account information and order history for as long as your account is active, or as required by law. If you close your account, we will delete your personal data within 90 days, except where retention is required for legal or financial compliance.

Email messages in your mailbox are retained until you delete them or your account is closed.

You have the right to:

• Access — request a copy of the personal data we hold about you
• Correction — request correction of inaccurate information
• Deletion — request deletion of your account and personal data
• Portability — request your data in a portable format

To exercise any of these rights, contact us at support@mailsnow.live. We will respond within 30 days.

We protect your data using the following measures:

• All data is transmitted over HTTPS (SSL/TLS encryption)
• Account passwords are hashed using bcrypt — never stored in plaintext
• Email mailbox passwords are stored encrypted on the mail server
• Rate limiting is applied to all authentication and purchase endpoints
• Security headers are enforced on all web responses
• Strict access controls limit who can access production systems

No system is 100% secure. In the unlikely event of a data breach, we will notify affected users within 72 hours of becoming aware of it.

We use only essential session cookies required for authentication (e.g. keeping you logged in to your Mailsnow account). We do not use advertising cookies, tracking pixels, or third-party analytics.

Our service is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with their information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by posting a notice on our website. Continued use of the service after changes take effect means you accept the updated policy.

If you have questions or concerns about this Privacy Policy or how we handle your data, please contact us at: support@mailsnow.live