Mailtation is an email infrastructure platform for AI applications. This policy describes how your data is collected, used, and protected.
All email data, user accounts, domain configurations, and mailbox content are stored on the server infrastructure where Mailtation is deployed. We do not transfer your data to third-party servers unless you explicitly configure third-party email sending services (such as Tencent SES).
We collect the following information to provide our services: email addresses and names for account management; domain records for DNS verification (SPF, DKIM, DMARC, MX, A records); email metadata and content for mail sending and receiving; API key usage logs for security monitoring; payment information when subscribing to plans (processed by third-party payment providers).
Inbound and outbound email content is stored on the server using Dovecot Maildir format. The web interface caches email metadata in PostgreSQL for faster access. Email sending via the cloud push service (Tencent SES) is subject to the cloud provider's own privacy policies.
User passwords are hashed using PBKDF2-SHA256. Mailbox passwords use BLF-CRYPT (bcrypt). Authentication uses JWT tokens with 7-day expiry. DKIM signing ensures outgoing email authenticity. API keys are stored as SHA-256 hashes and shown only once at creation.
If you configure the Send Service feature, emails are sent through Tencent Cloud SES. Payment processing is handled by Alipay/WeChat Pay or Stripe. Google login (if enabled) uses Google OAuth. These services have their own privacy policies.
You can access, modify, or delete your account data at any time through the platform settings. Deleting a domain will remove all associated mailboxes and email data. You can export your email data via IMAP.