• Account: your email address, a password hash (argon2id; we never store your password), one-time verification and reset codes (stored only as keyed hashes while valid), and when the account was created and last signed in.
• Sessions: a hash of each session token, plus the IP address and user agent it was created from, and when it was last used.
• Mail: the inboxes you create and every message they receive or send, including bodies, headers, attachments, sender and recipient addresses, thread information, labels, and the SPF, DKIM and DMARC results and threat-screening scores for inbound mail.
• Your configuration: contacts, templates, suppression lists, review queue items, webhook endpoints and their delivery history, and registered domains. Webhook signing secrets and domain DKIM private keys are stored encrypted; API keys are stored only as hashes.
• Operations: delivery status and bounce or complaint feedback for mail you send, usage counts used to apply limits, and security events detected on your inboxes.

• To provide the service: receive, screen, store, deliver and send your mail and run your webhooks.
• To keep the service and others safe: apply sending limits, pause accounts with high bounce or complaint rates, investigate abuse and respond to provider or legal requests.
• To run accounts: sign you in, send verification and reset codes, and contact you about important changes.

We do not sell your data and we do not use your mail for advertising.

Other customers cannot. Our staff do not read your mail as a matter of course; we may look at message content or metadata only to investigate suspected abuse or a security problem, to fix a fault you ask us to look at, or when the law compels us.

• Amazon Web Services hosts the service in the US East (Ohio, us-east-2) region.
• Amazon SES relays mail you send to the public internet and reports delivery, bounce and complaint events back to us. Recipients' mail providers also receive the mail you send.
• Webhook destinations you configure receive the event data you subscribe to.

Your data is therefore processed in the United States. We share data with authorities only when legally required.

• Your data is kept while your account exists. Webhook delivery records and idempotency records are pruned automatically after their retention periods; messages you move to trash are removed after the trash retention period.
• You can delete your account from the account page. This deletes your inboxes, messages, attachments, contacts, templates, webhooks, API keys, domains and sessions immediately.
• We keep backups of the service database on the same server. Backups are pruned after about 14 days (the most recent few are always kept), so deleted data can remain in a backup for that long and is not restored except to recover the service.
• If we have to retain something to meet a legal duty or investigate abuse we may keep it for as long as needed.

You can read and change your inboxes and settings in the dashboard, export your data with the account export API before deleting, and delete your account at any time. To ask about, correct or delete data we hold about you, or to object to how we use it, write to support@vadoo.tv. Depending on where you live you may have further rights under local law; we will respond as that law requires.

We set one cookie that keeps you signed in. It is strictly necessary, is not readable by scripts on the page and is removed when you sign out or delete your account. We do not use advertising or analytics cookies.

We use industry-standard measures such as hashed passwords and tokens, encrypted secrets and per-account separation of data, and we limit who can access the server. No system is perfectly secure, and we cannot guarantee absolute security.

We may update this policy and will change the date above when we do. Questions or requests: support@vadoo.tv.