Privacy Policy

Last updated: March 11, 2026

USMail ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and protect information about you when you use USMail services at usmail.app and related subdomains.

1. Information we collect

Account information

When you create a USMail account, we collect your name, email address, and password (stored as a secure hash). If you connect a domain, we store the domain name and associated DNS configuration.

Email content

USMail processes email messages on your behalf as part of the service. We store message content, headers, and attachments in order to deliver the service. We do not read, analyze, or use your email content for any purpose other than delivering your mail service.

Usage data

We collect information about how you use the service — pages visited, features used, and actions taken within the workspace. This data is used to improve the product and is not sold or shared with third parties for advertising purposes.

Technical data

We automatically collect IP addresses, browser type, device information, and log data when you access our services. This is used for security, debugging, and service reliability purposes.

2. How we use your information

• To provide, operate, and improve the USMail service
• To authenticate your identity and maintain account security
• To process and route email messages on your behalf
• To send service-related communications (account notifications, security alerts)
• To respond to support requests and inquiries
• To detect and prevent fraud, abuse, and security incidents
• To comply with legal obligations

We do not use your email content for advertising, machine learning model training, or any purpose beyond delivering the service.

3. Data sharing

We do not sell your personal data. We do not share your data with third parties for advertising purposes. We may share data with:

• Service providers who help us operate the service (hosting, infrastructure), under strict data processing agreements
• Law enforcement when required by applicable law, court order, or legal process
• Successor entities in the event of a merger, acquisition, or sale of assets, with prior notice to users

4. Data retention

We retain your account data for as long as your account is active. Email content is retained according to your workspace settings. When you delete your account, we delete your personal data within 30 days, except where retention is required by law.

5. Your rights

Depending on your location, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your personal data
• Portability: Request your data in a portable format
• Objection: Object to certain processing activities
• Restriction: Request restriction of processing in certain circumstances

To exercise these rights, contact us at [email protected].

6. Security

We implement industry-standard security measures including TLS 1.3 encryption in transit, encrypted storage, access controls, and regular security reviews. No system is 100% secure, but we take reasonable precautions to protect your data.

7. Cookies

We use essential cookies to operate the service (authentication, session management). We use analytics cookies to understand how the service is used. See our Cookie Policy for details.

8. GDPR

For users in the European Economic Area, USMail acts as a data controller for account data and a data processor for email content processed on your behalf. Our legal basis for processing is contract performance (to deliver the service you've signed up for) and legitimate interests (security, fraud prevention). Enterprise customers may request a Data Processing Agreement (DPA) at [email protected].

9. Contact

For privacy questions, data requests, or concerns, contact us at [email protected].