Privacy policy
Last updated: 13 October 2026
This page explains what mailsi collects, what it is used for, and how long it is kept.
What we collect
Your sign-in email address, used to send sign-in links and identify your account.
The domains, aliases and destination addresses you add.
Forwarding and reply metadata: time, result, message size, and related account or domain IDs. Forwarding records do not contain sender or recipient addresses or subject lines.
External correspondents' reply addresses, stored encrypted so that replies reach the right person.
The IP address and browser information (User-Agent) of sign-in sessions, used to keep accounts secure.
Anything you send us directly, such as a waitlist email or an abuse report.
Message contents
Message contents are not written to the database. During forwarding they pass only through server memory. If a recipient is temporarily unavailable, the mail queue may hold the message until it is delivered or returned.
How we use data
To provide, maintain and protect the service; to enforce daily limits and abuse protection; to send sign-in links and service notices; and to answer your questions.
Retention
Sign-in links: 15 minutes, single use.
Sign-in sessions: 30 days, extended when you use them.
Forwarding records (metadata, no message contents): 30 days on every plan.
Reply addresses for outside correspondents: deleted after 90 days without use.
Daily usage totals: about 13 months.
System monitoring probe records: 2 days.
Third-party services
Cloudflare provides DNS and network protection. If you use Cloudflare one-click setup, we use the API token you provide only during that operation and do not store or log it.
MongoDB Atlas hosts our database.
Where configured, Cloudflare Turnstile is used to prevent abuse. Google Analytics is used only where a measurement ID has been set for the website.
Where the service runs
The service runs on cloud servers in the AWS Singapore region (ap-southeast-1).
Your rights
You can delete your account in Settings. To ask for a copy or a correction of your personal data, or for deletion, email [email protected].
Policy updates
We publish policy changes on this page and update the "Last updated" date.