Your Privacy Matters
Last updated: June 17, 2026 — Effective immediately.
1. Introduction
Welcome to MailVault ("we", "us", or "our"). We operate mailvault.io and are committed to protecting your personal information and your right to privacy.
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our exclusive email service. Please read it carefully.
2. Information We Collect
We collect information that you voluntarily provide when you register for or use MailVault. This may include:
- Name and email address provided during account creation or login.
- Usage data such as IP addresses, browser type, pages viewed, and timestamps.
- Communication metadata (sender, recipient, subject lines — never content without consent).
- Device information including operating system and browser version.
- Cookies and similar tracking technologies as described in our Cookie Policy.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain our email service.
- Improve, personalise, and expand our services.
- Process transactions and send related information.
- Send you technical notices, updates, and security alerts.
- Respond to comments and questions and provide customer support.
- Monitor and analyse usage patterns to improve user experience.
- Detect, prevent, and address technical issues and abuse.
4. Email Content & End-to-End Encryption
MailVault employs end-to-end encryption for all email content. We cannot read the body of your encrypted emails. Metadata (sender, recipient, timestamps) is processed solely for delivery purposes.
We do not sell, rent, or share the content of your emails with third parties for any purpose, including advertising.
5. Sharing Your Information
We may share your information in the following limited circumstances:
- Service Providers: Trusted third parties who assist in operating our infrastructure, subject to strict confidentiality agreements.
- Legal Requirements: When required by law, court order, or governmental authority.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, with prior notice to you.
- With Your Consent: For any other purpose with your explicit consent.
6. Data Retention
We retain your personal data only for as long as necessary to provide our services and comply with legal obligations. Account data is deleted within 30 days of account closure. Anonymised analytics data may be retained indefinitely.
7. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your personal data ("right to be forgotten").
- Object to or restrict certain processing activities.
- Data portability — receive your data in a structured, machine-readable format.
- Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at [email protected].
8. Security
We implement industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, regular security audits, and strict access controls. However, no method of transmission over the Internet is 100% secure.
9. Changes to This Policy
We may update this Privacy Policy periodically. We will notify you of significant changes by email or by posting a prominent notice on our website. Continued use after changes constitutes acceptance of the updated policy.
10. Contact Us
If you have questions about this Privacy Policy, please contact us at [email protected].