Privacy Policy

This is a starting template and not legal advice. Review and adapt it with qualified legal counsel, and confirm it matches your actual data practices and jurisdiction.

This policy explains what data Proxamail (the "Service") collects and how we use it.

1. Data we collect

• Account data: your email address, organization name, and a securely hashed password.
• Product data: domains you add or purchase, masking configurations, and blacklist check results.
• API keys you create (stored only as a hash).
• Basic technical data such as request metadata and logs.

2. How we use it

We use your data solely to provide and operate the Service: authenticating you, managing your domains and masking, running blacklist checks, sending transactional emails (such as verification and password reset), and securing the platform.

3. Service providers

We share data with infrastructure providers only as needed to run the Service:

• Cloudflare — DNS, the masking proxy, and domain registration.
• AWS Route 53 — DNS hosting for your domains.
• Resend — sending transactional emails.
• Railway — application and database hosting.
• Spamhaus and SURBL — blacklist status lookups via DNS.
• Stripe — payment processing (only if paid billing is enabled).
• PostHog — privacy-friendly product analytics (aggregate usage and funnel metrics).

4. Cookies & analytics

We use a single, essential, HTTP-only session cookie to keep you logged in. We also use privacy-friendly product analytics (PostHog) to understand aggregate usage and improve the product. We do not use third-party advertising cookies.

5. Data retention and deletion

We retain your data while your account is active. You can request deletion of your account and associated data by contacting us.

6. Security

Passwords and API keys are hashed, tenant data is isolated at the database level (row-level security), and internal secrets are not exposed to the browser.

7. Contact

Privacy questions or deletion requests: support@www.proxamail-test-9x27.xyz.