Privacy Policy

1. Information We Collect

We collect information you provide directly and information generated through your use of the service.

Account and identity information

• Full name, business email address, and password when you register
• Company domain name you associate with your account
• Billing and payment details processed through our payment provider, Stripe
• Profile information you choose to add or update

Email and communication content

• Emails you send, receive, draft, schedule, and archive within the platform
• Attachments, inline images, and file uploads associated with messages
• Contacts and recipient information linked to your mailbox
• Calendar events and meeting details if you connect Google Calendar or Zoom

Usage and technical data

• Log data including IP address, browser type, operating system, and timestamps
• Actions performed within the application (folder navigation, search queries, settings changes)
• Device identifiers and session tokens used to maintain your authenticated session
• Performance and error data to monitor and improve service reliability

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the NevTan Mail service
• Authenticate users and enforce access controls across mailbox, admin, and super-admin roles
• Deliver, route, store, and display email messages within your mailbox
• Process subscription payments and maintain billing records through Stripe
• Configure custom domains and generate DNS records (SPF, DKIM, DMARC) for email delivery
• Enable calendar scheduling and meeting features through connected Google and Zoom integrations
• Send service notifications, security alerts, and support communications
• Detect, investigate, and prevent unauthorized access, spam, and abuse
• Comply with legal obligations and respond to lawful requests from public authorities

We do not sell your personal information or email content to third parties. We do not use your email content to serve advertising.

3. Data Storage and Security

Your data is stored on servers located in the United States. We apply technical and organizational measures to protect your information, including:

• Encrypted data transmission using TLS for all connections to the platform
• Authentication tokens and session management to limit unauthorized access
• Role-based access controls that restrict data visibility to account holders and designated administrators
• Regular security assessments and infrastructure monitoring

No method of electronic transmission or storage is 100% secure. While we work to protect your data, we cannot guarantee absolute security. In the event of a data breach that affects your personal information, we will notify you as required by applicable law.

4. Third-Party Services

NevTan Mail integrates with the following third-party services to deliver platform features:

Stripe (payments and billing)

Subscription payments are processed by Stripe, Inc. When you subscribe, your payment card information is collected and stored directly by Stripe. NevTan does not store full card numbers. Stripe's privacy policy is available at stripe.com/privacy.

Google (calendar integration)

If you choose to connect your Google account, NevTan Mail requests permission to manage calendar events (the https://www.googleapis.com/auth/calendar.events scope) so it can create, update, and delete on your own Google Calendar the meetings you schedule in the app, attach a Google Meet link, and notify the attendees you add. We request only the permissions necessary for this feature, and this Google data is used solely to provide it at your request.

With whom we share Google user data: NevTan Mail does not share, transfer, sell, or otherwise disclose your Google user data to any third parties. It is not shared with advertisers, data brokers, or any other application, is not used for advertising, and is not used to develop, improve, or train generalized artificial intelligence or machine learning models. Your Google user data is accessed only by NevTan Mail's own systems and only to operate the calendar and meeting features you use. We would disclose it solely where required to do so by law or to comply with a valid legal request. You may disconnect Google access at any time from your calendar settings, which deletes the stored authorization.

NevTan Mail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements. Google's privacy policy is available at policies.google.com/privacy.

Zoom (meeting integration)

If you connect your Zoom account, NevTan Mail uses OAuth to schedule and manage Zoom meetings from the calendar feature. We access only the scopes required to create meetings on your behalf. You may disconnect Zoom access at any time from your calendar settings. Zoom's privacy policy is available at explore.zoom.us/en/privacy.

5. Data Retention

We retain your account data for as long as your account is active or as needed to provide the service. Email content, contacts, and calendar data are retained for the duration of your subscription and for up to 90 days following account termination, after which they are deleted from our systems.

Billing records and transaction logs may be retained longer where required by tax, accounting, or legal obligations. Anonymized usage and performance data may be retained indefinitely for service improvement purposes.

6. Your Rights and Choices

Depending on your location and applicable law, you may have the right to:

• Access a copy of the personal information we hold about you
• Correct inaccurate or incomplete account information
• Request deletion of your account and associated personal data
• Export your data before account termination
• Withdraw consent for optional third-party integrations (Google, Zoom) at any time

To exercise any of these rights, contact us at support@nevtan.com. We will respond to your request within 30 days.

7. Children's Privacy

NevTan Mail is a business email service intended for use by adults operating commercial entities. We do not knowingly collect personal information from individuals under 18 years of age. If you believe a minor has submitted data to us, please contact us at support@nevtan.com and we will delete that information promptly.

8. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and notify active account holders via email or an in-app notice. Your continued use of NevTan Mail after a policy update constitutes acceptance of the revised terms.

9. Contact Us

If you have questions about this Privacy Policy or how we handle your data, please contact us:

• Email: support@nevtan.com
• Website: nevtan.com