Last updated: February 14, 2026 · Effective immediately
Plain English summary: We collect the minimum data needed to run the service. We store your emails temporarily so you can read them via API. We don't read your emails for any other purpose. We don't sell your data. We don't track you across the web. When your data's retention period expires, it's gone.
AI Email Service ("we," "us," "our") operates the receive-only email service at aiemailservice.com. We are the data controller responsible for your personal data.
Contact: privacy@aiemailservice.com
We collect different categories of data, each for a specific purpose:
| Data | Purpose | Retention |
|---|---|---|
| API Key | Authentication | Until account deletion |
| IP address (at signup) | Trial abuse prevention (1 per IP) | 90 days |
| Wallet address (if provided) | Account recovery, payment association | Until account deletion |
| Payment metadata (Stripe customer ID, transaction ID) | Payment processing, refunds | As required by tax law (typically 7 years for financial records) |
| Data | Purpose | Retention |
|---|---|---|
| Incoming email content (text, HTML, headers) | Deliver messages to you via API | Trial: 24 hours. Paid: 30 days. |
| Sender address, subject line | Message listing and filtering | Same as email content |
| Extracted OTP codes | Automatic code extraction feature | Same as email content |
| Email attachments | Not stored. Attachments are stripped on receipt. | N/A |
| Data | Purpose | Retention |
|---|---|---|
| API request logs (endpoint, timestamp, API key hash, response code) | Rate limiting, abuse detection, debugging | 30 days |
| SMTP connection logs (sender IP, envelope info) | Deliverability debugging, abuse prevention | 7 days |
| Error logs | Service reliability | 30 days |
We use your data only for the following purposes:
We do not:
If you are in the European Economic Area (EEA) or United Kingdom, we process your data under the following legal bases:
| Processing Activity | Legal Basis |
|---|---|
| Email storage and delivery | Contract performance (providing the service you paid for) |
| Payment processing | Contract performance |
| IP logging for trial limits | Legitimate interest (preventing abuse) |
| API request logging | Legitimate interest (rate limiting, security) |
| Responding to legal requests | Legal obligation |
We share limited data with the following service providers who assist in operating the Service:
We do not sell, trade, or otherwise transfer your personal data to third parties for commercial purposes. Period.
We may disclose data if required by law, court order, or government request. We will:
We take data security seriously and implement the following measures:
No system is 100% secure. While we implement industry-standard security measures, we cannot guarantee absolute security. In the event of a data breach, we will notify affected users within 72 hours as required by applicable law.
We follow a strict data minimization approach:
| Data Type | Trial Retention | Paid Retention |
|---|---|---|
| Email messages | 24 hours | 30 days |
| Extracted codes | 24 hours | 30 days |
| API request logs | 30 days | 30 days |
| SMTP connection logs | 7 days | 7 days |
| IP trial records | 90 days | N/A |
| Account/API key data | Until expiry + 30 days | Until deletion + 30 days |
| Payment records | N/A | As required by law (up to 7 years) |
When a mailbox expires or is deleted, all associated messages are permanently and irreversibly deleted. We do not keep backups of deleted mailbox data.
Depending on your jurisdiction, you may have the following rights:
DELETE /v1/mailbox/{id})In addition to the above, you have the right to:
To exercise any of these rights, contact privacy@aiemailservice.com. We will respond within 30 days.
California residents have additional rights under the CCPA:
Our servers are located in the European Union. If you access the Service from outside the EU, your data will be transferred to and processed in the EU. The EU provides strong data protection under the GDPR.
For transfers of personal data outside the EEA (e.g., to payment processors), we rely on Standard Contractual Clauses (SCCs) or the service provider's adequacy certifications.
The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child under 18, we will delete it promptly.
Given that our primary users are AI agents:
Our marketing website (aiemailservice.com) does not use cookies, tracking pixels, or third-party analytics. We don't need to track you to sell you an API key.
Our documentation pages may use a minimal session cookie for navigation state. This cookie:
We may update this Privacy Policy from time to time. When we make material changes:
We encourage you to review this policy periodically.
For any questions about this policy or your data, contact our Data Protection Officer:
For privacy-related inquiries: