Skip to content
mailsi

Privacy policy

Last updated: 13 October 2026

This page explains what mailsi collects, what it is used for, and how long it is kept.

What we collect

Your sign-in email address, used to send sign-in links and identify your account.

The domains, aliases and destination addresses you add.

Forwarding and reply metadata: time, result, message size, and related account or domain IDs. Forwarding records do not contain sender or recipient addresses or subject lines.

External correspondents' reply addresses, stored encrypted so that replies reach the right person.

The IP address and browser information (User-Agent) of sign-in sessions, used to keep accounts secure.

Anything you send us directly, such as a waitlist email or an abuse report.

Message contents

Message contents are not written to the database. During forwarding they pass only through server memory. If a recipient is temporarily unavailable, the mail queue may hold the message until it is delivered or returned.

How we use data

To provide, maintain and protect the service; to enforce daily limits and abuse protection; to send sign-in links and service notices; and to answer your questions.

Retention

Sign-in links: 15 minutes, single use.

Sign-in sessions: 30 days, extended when you use them.

Forwarding records (metadata, no message contents): 30 days on every plan.

Reply addresses for outside correspondents: deleted after 90 days without use.

Daily usage totals: about 13 months.

System monitoring probe records: 2 days.

Third-party services

Cloudflare provides DNS and network protection. If you use Cloudflare one-click setup, we use the API token you provide only during that operation and do not store or log it.

MongoDB Atlas hosts our database.

Where configured, Cloudflare Turnstile is used to prevent abuse. Google Analytics is used only where a measurement ID has been set for the website.

Where the service runs

The service runs on cloud servers in the AWS Singapore region (ap-southeast-1).

Your rights

You can delete your account in Settings. To ask for a copy or a correction of your personal data, or for deletion, email [email protected].

Policy updates

We publish policy changes on this page and update the "Last updated" date.