Privacy policy

1. Data we collect

• Account data: email, phone, country or region, verification, and sign-in status.
• Mailbox data: MBTI mailbox addresses, forwarding destinations, service status, SMTP credential status, and delivery events.
• Payment data: orders, transaction identifiers, plans, amounts, currency, discounts, refunds, and invoices. We do not store full card numbers or security codes.
• Security data: IP address, device, browser, session, login time, errors, and activity records.
• Support data: descriptions, attachments, screenshots, and correspondence you provide.
• Website, cookie, source, and performance data collected with your consent.

2. Email data

For normal incoming forwarding, email delivery infrastructure processes the message and forwards it to your chosen address. MBTI mail is not a permanent mailbox and does not store ordinary forwarded message bodies or attachments in its application database.

For outgoing mail, content is processed temporarily as needed for queueing, delivery, retries, and errors. The body is not retained as a permanent mailbox after delivery finishes, although delivery events and necessary technical records may be kept for a limited period.

While an MBTI mailbox is suspended, we may process sender, recipient, and subject to send you a missed-message notice. We also process email material you choose to provide in a support or abuse report.

3. How we use data

• Create accounts, MBTI mailboxes, forwarding, and sending access.
• Handle subscriptions, payments, refunds, invoices, and service notices.
• Provide support and resolve bounces, delivery issues, and account-security events.
• Prevent fraud, abuse, spam, and unauthorized access.
• Meet legal, accounting, tax, and regulatory duties.
• Measure website and advertising performance with your consent.

4. Message-content principles

We do not scan email for advertising, interest profiles, or personality analysis, and we do not routinely read user messages.

We process relevant data only as necessary when you request support, a specific report is received, a security event or delivery error is investigated, law requires it, or urgent harm must be prevented.

5. Cookies

Essential cookies support login, security, language, checkout, and preferences. Optional analytics and marketing cookies are enabled only with your consent, which you can withdraw through Cookie Preferences.

Marketing technology may automatically identify contact details such as an email address or phone number that you enter in website forms. These identifiers are normalized and hashed before they are sent to advertising providers for event matching, ad measurement, audience creation, and delivery optimization.

6. Sharing

We do not sell personal data. We use the following types of processors only as needed to provide the service:

• Cloud hosting, databases, and infrastructure.
• Email delivery, messaging, login, and identity verification.
• Payments, refunds, invoicing, support, security, legal, and accounting.
• Website analytics and advertising measurement within the scope of your consent.

7. Legal disclosure and international processing

We may provide necessary data to an authorized authority where required by law or needed to prevent fraud, a serious security incident, or harm to a person.

Some processors may operate outside Taiwan, so data may be processed internationally. We manage these transfers through applicable law, contracts, and security safeguards.

8. Retention

Account and mailbox settings are kept while the account exists and afterward as needed by law or for disputes. Payment, refund, and invoice records are retained for legal, accounting, and tax periods.

Normal forwarded content is not retained as a permanent mailbox. Outgoing content is processed temporarily for delivery and errors. Support, delivery, security, and abuse records are kept until their purpose and a reasonable dispute period end. Internal website measurement and attribution data are generally kept no longer than 180 days.

When the purpose ends, we delete, anonymize, or stop using data unless law, an unresolved dispute, or protection of rights requires retention.

9. Security

We use encryption in transit, access controls, credential protection, backups, monitoring, and staff access limits. No online service is risk-free; we will handle and report a legally notifiable incident as required.

10. Your rights

You may request access, a copy, correction, supplementation, an end to collection or use, deletion, or withdrawal of consent as provided by law.

We may not be able to complete a request immediately where retention is legally required, a contract remains active, a security investigation is open, or another person’s rights are involved. We may verify your identity first.

Mandatory personal-data and privacy rights that apply where you live remain unaffected by this policy.

11. Required data and policy updates

Without data required for registration, verification, payment, or mailbox service, we may be unable to provide that feature. You may refuse optional analytics and marketing data without affecting the basic service.

We may update this policy when the service, law, or processing changes. We will announce material changes before they take effect.