Skip to main content

Privacy Policy

Last updated: May 2, 2025

1. Information We Collect

When you create an MGS Mail account, we collect your chosen username, a recovery email address, and a hashed version of your password. We do not store your password in plain text.

When you use the service, we process and store the emails you send and receive, including message content, attachments, metadata (sender, recipients, timestamps), and folder/label organization.

2. How We Use Your Information

  • Provide the service: Deliver, store, organize, and search your emails.
  • Security: Detect spam, phishing, and unauthorized access. Enforce rate limits and account lockout policies.
  • Billing: Process subscription payments via Stripe. We do not store credit card numbers — Stripe handles all payment data.
  • Communication: Send verification emails, password reset links, and critical account notifications to your recovery email.

3. Encryption

All emails are encrypted at rest using AES-256-GCM. All connections use TLS 1.2 or higher. When end-to-end encryption is enabled, email bodies are encrypted with the recipient's public key before storage — we cannot read E2E-encrypted content.

4. Data Sharing

We do not sell, rent, or share your personal data with third parties except:

  • Service providers: Amazon Web Services (email delivery via SES, storage via S3), Stripe (payment processing), and infrastructure providers necessary to operate the service.
  • Legal requirements: When required by law, subpoena, or court order.

5. Data Retention

Emails in Trash and Spam are automatically deleted after 30 days. When you delete your account, all data is permanently removed after a 30-day grace period. You may cancel deletion by logging in during this period.

6. Your Rights

You may export your contacts at any time (CSV or vCard). You may request account deletion from Settings. You may access and update your profile information at any time.

7. Cookies

We use a single session cookie to maintain your authentication state. We do not use tracking cookies or third-party analytics.

8. Changes

We may update this policy. Material changes will be communicated via your recovery email at least 30 days before taking effect.

9. Contact

For privacy inquiries, email privacy@mail.mgshosting.com.