Privacy Policy

This Privacy Policy explains what data AirMail24 Ltd ("AirMail24", "we") processes, why, and the choices you have. We've tried to write it in plain English.

1. Who we are

AirMail24 is an independent, subscription-funded email provider. For the purposes of data protection law, AirMail24 Ltd is the data controller for the personal data described here. You can reach our privacy team at [email protected].

2. What we collect

We deliberately keep this short:

• Account data — your chosen address, an encrypted copy of your password verifier, and (optionally) a recovery email.
• Billing data — for paid plans, the plan, currency and a token from our payment processor. We do not store full card numbers.
• Technical metadata — limited delivery and security logs (e.g. timestamps, sending server, message size) needed to deliver mail and prevent abuse.
• Diagnostics — aggregated, non-identifying performance data, only where you have not opted out.

3. What we can't see

Thanks to zero-access encryption, the following are stored encrypted with keys we don't hold, so we cannot read them:

• the bodies and attachments of your messages;
• your contacts and calendar entries;
• your folders, drafts and labels.

This means that even if compelled, we are technically unable to produce the contents of your encrypted mailbox.

4. How we use your data

• to provide, secure and maintain the Service;
• to deliver and route email reliably;
• to detect and prevent spam, fraud and abuse;
• to process payments and manage subscriptions;
• to respond to your support requests.

We do not use your data for advertising or profiling, and we do not sell it.

5. Legal bases

Where the GDPR applies, we rely on: performance of our contract with you (to run your account); our legitimate interests (to secure the Service and prevent abuse); legal obligation (e.g. tax records); and consent (e.g. optional diagnostics), which you can withdraw at any time.

6. Who we share with

We share personal data only with carefully selected processors who help us run the Service — for example payment processing and EU-based hosting — under contracts that require them to protect your data. We may disclose limited metadata if legally required, and we publish a transparency report describing such requests. We never sell your data.

7. How long we keep it

We keep account data while your account is active. If you delete your account, we remove your mailbox and associated personal data within 30 days, except where we must retain limited records (such as invoices) to meet legal obligations.

8. Your rights

Depending on where you live, you may have the right to access, correct, export, restrict or delete your personal data, and to object to certain processing. You can exercise most of these directly in your account settings, or by contacting us. You also have the right to complain to your local data protection authority.

9. Cookies

We use a small number of strictly necessary cookies to keep you signed in and to keep the Service secure. We do not use advertising or cross-site tracking cookies. Optional analytics, if enabled, are privacy-preserving and aggregated.

10. Where your data lives

Your data is hosted in the European Union. Where data is processed outside your region, we use appropriate safeguards (such as standard contractual clauses) to protect it.

11. Contact us

For any privacy question or request, email [email protected] or write to AirMail24 Ltd, Privacy Office, EU. See also our Terms of Service.