Privacybeleid

1. Overview

This Privacy Policy explains how Mailinio (“we”, “us”) collects and processes personal data when you use our Service. We designed Mailinio so you stay in control of what is sent from your mailbox.

2. Data we collect

• Account data: email address, name, and profile fields from your sign-in provider.
• Mailbox data: when you connect Outlook, we access message metadata and content needed to list inbox items, open threads, draft replies, and send mail you approve.
• AI interaction data: generated drafts, edits, send status, optional feedback, and explanations associated with your account.
• Technical data: approximate usage logs, IP-derived request metadata for security and rate limiting, and cookie preferences.
• Contact data: information you submit via the contact form.

3. How we use data

We use personal data to:

• authenticate you and operate the Service
• connect to Microsoft Graph on your behalf
• generate and improve draft replies for you
• learn writing-style signals from replies you choose to send
• provide support, security, and abuse prevention
• understand product usage (if you accept analytics cookies)

4. AI processing

Email content and draft text may be sent to our AI provider (currently OpenAI) to generate summaries, replies, improvements, explanations, and style signals. We instruct providers not to use your content to train their public models where the provider’s API terms allow that configuration. Do not use Mailinio for data you are not permitted to process with a third-party AI service.

5. Outlook tokens

Access and refresh tokens for Microsoft Graph are encrypted at rest using application-level encryption before storage. You can disconnect Outlook at any time, which deletes stored tokens from our database.

6. Sharing

We share data with processors that help us run the Service, including hosting (e.g. Vercel), authentication/database (Supabase), Microsoft (Graph API), and our AI provider. We do not sell your personal data.

7. Cookies

Essential cookies are required for authentication and security. Optional analytics cookies are used only if you choose “Accept all” on the cookie banner. You can change your mind by clearing site data in your browser.

8. Retention

We retain account and interaction records while your account is active and for a reasonable period afterward for security, legal, and operational purposes. You may request deletion by contacting us.

9. Your rights

Depending on your location, you may have rights to access, correct, delete, or export your personal data, or to object to certain processing. Contact us to exercise these rights. If you are in the EEA/UK, you may also lodge a complaint with your local supervisory authority.

10. Security

We use encryption in transit (HTTPS), encrypted token storage, origin checks on mutating requests, and rate limiting. No method of transmission or storage is perfectly secure.

11. Children

The Service is not directed to children under 16. We do not knowingly collect personal data from children.

12. Changes

We may update this Privacy Policy from time to time. We will revise the “Last updated” date and, when appropriate, provide additional notice.

13. Contact

Privacy requests: hello@mailinio.com.