Privacy Policy

Account data: your name, email address and password (stored only as a secure hash), and the company or workspace you create.

Domain and mailbox configuration: the domains you add, DNS records and verification status, mailbox names, aliases, forwarding rules and signatures.

Mail data: messages you compose, send or view through the Maililo webmail, and their attachments. Mail sent and received through your own mail infrastructure is primarily stored on that infrastructure, not by Maililo.

Technical data: security and audit logs such as sign-ins and administrative actions, needed to operate the service safely.

We use your data to provide the service: authenticating you, managing your domains and mailboxes, displaying your mail, enforcing plan limits, preventing abuse and providing support. We do not sell your data and we do not use your email content for advertising.

Maililo connects to the mail infrastructure you choose. When you use your own mail server, your messages are stored and delivered there under your control. Maililo only accesses that server to perform actions you request — reading your inbox in the webmail, sending a message you composed, or provisioning a mailbox.

Credentials needed to access mailboxes on your behalf are stored encrypted and are never exposed to the browser or included in logs.

We share data only with the providers needed to run Maililo: our hosting and database provider, payment processing for paid plans, and the mail infrastructure you connect. Each processes data only to deliver the service. We may disclose data if required by law, with notice where permitted.

Maililo uses a small number of strictly necessary cookies and equivalent storage to keep you signed in and secure. We do not currently use advertising or cross-site tracking cookies. You can review and change cookie-related choices on the Cookie Preferences page.

We keep account and configuration data while your account is active. When you delete your account, we delete your personal data within 30 days, except where longer retention is required by law. Mail stored on your own infrastructure remains there under your control.

You can access, correct and export your data from your account settings, and delete your account at any time. If you are in the EU/EEA or UK, you also have the right to object to or restrict processing and to lodge a complaint with your data protection authority.

We protect your data with encryption in transit and at rest, role-based access control inside the product, and audit logging of administrative actions. No system is perfectly secure; if a breach affects your data, we will notify you without undue delay.

Privacy questions or requests? Contact us from your account dashboard or through the support section of our site.