Privacy policy

This describes what numail collects, why, and who sees it. We keep this short on purpose — there isn't much to hide.

What we store

  • Account info: the email address you sign in with.
  • Domain info: the domain names you've added and their DNS verification status.
  • Mailbox metadata: mailbox addresses, creation dates, and storage usage — not their contents, beyond what's needed to serve mail.
  • Billing info: handled by Stripe. We store your Stripe customer and subscription IDs, plan quantity, and invoice history. We never see or store your card number — Stripe handles that entirely.

Mail content

Your mail is stored on our mail server (Stalwart, on infrastructure we control) and encrypted in transit between servers and to your mail client. We process message content only to do the things you'd expect: deliver it to your mailbox, filter spam, and serve it back to you over IMAP/webmail. We do not read, scan for advertising, mine, or sell the content of your mail — to anyone, ever. numail has no ads and no data-monetization business model; your subscription fee is the entire business.

Third parties we use

  • Stripe — payment processing and billing. They hold your card details, not us.
  • Cloudflare — delivers our transactional service emails (sign-in links, billing notices) and provides DNS/network infrastructure.
  • SMTP2GO — relays your mailbox's outbound mail. They retain message headers for 35 days for delivery troubleshooting; message content is not stored.
  • Fly.io (Singapore region) — hosts our mail server.

Each of these processes only what's needed for their function (payments, mail relay, hosting) and is bound by their own standard data-protection terms.

Analytics

We use Cloudflare Web Analytics on our marketing site, which is cookieless and doesn't track individuals across sites. We don't run any other tracking or advertising scripts.

Cookies

The portal sets one session cookie to keep you signed in. It's httpOnly (not readable by page scripts) and used solely for authentication — no tracking or third-party cookies.

Where your data lives

All infrastructure — mail storage, database, and application servers — is hosted in Singapore.

Retention

We retain your data for as long as your account is active, plus 30 days after suspension (see Terms of service) in case you want to reinstate. After that window, data is permanently deleted.

Your rights

  • Export: pull your mail out any time via IMAP, or download it from webmail — no need to ask us first.
  • Deletion: request full account deletion any time and we'll erase your data, subject to the retention window above.
  • Questions or requests: email support@numail.app and we'll respond promptly.