Privacy Policy

1. Introduction

Motimail ("we", "our", or "us") operates a professional email infrastructure platform. This Privacy Policy explains how we collect, use, disclose, and protect information about you when you use our services at motimail.com and related subdomains.

2. Information We Collect

• Account information: name, email address, password (hashed), billing details.
• Email metadata: sender, recipient, subject, timestamps — used to provide the service.
• Email content: stored encrypted to deliver the email service.
• Usage data: IP addresses, browser type, pages visited, and feature usage.
• Technical data: server logs for security and debugging purposes.

3. How We Use Your Information

• To provide, operate, and maintain our email infrastructure service.
• To authenticate your identity and secure your account.
• To process transactions and send related administrative emails.
• To detect and prevent fraud, abuse, and security threats.
• To comply with legal obligations.
• To respond to support requests and improve our services.

4. Gmail API Usage

If you connect a Gmail account to our webmail client, we access your Gmail data via Google's Gmail API. Our use of Gmail data is limited to providing the email client functionality. We do not use Gmail data for advertising, do not sell Gmail data, and do not allow humans to read your Gmail data except for security purposes or where required by law. Our use of Gmail user data is in accordance with Google's API Services User Data Policy.

5. Data Sharing

We do not sell, trade, or rent your personal information to third parties. We may share information with:

• Service providers who assist us in operating our platform (e.g., hosting, payment processing).
• Law enforcement or regulatory authorities when required by law.
• Business partners with your explicit consent.

6. Data Retention

We retain your data for as long as your account is active or as needed to provide services. You may request deletion of your account and associated data at any time by contacting us.

7. Security

We use industry-standard security measures including TLS encryption in transit, AES-256 encryption at rest, DKIM/SPF/DMARC authentication, and regular security audits to protect your data.

8. Your Rights

• Access: Request a copy of the personal data we hold about you.
• Rectification: Request correction of inaccurate data.
• Erasure: Request deletion of your data.
• Portability: Request your data in a machine-readable format.
• Objection: Object to certain processing of your data.

9. Cookies

We use essential cookies for authentication and security (e.g., session tokens, CSRF tokens). We do not use tracking or advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or by a prominent notice on our platform. Continued use of our services after changes constitutes acceptance of the updated policy.