Privacy Policy

CraftCodely SRL ("we," "us," or "our") operates Mailyond, a multi-domain email management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service at mailyond.com.

We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using Mailyond, you agree to the collection and use of information in accordance with this policy.

We use your information for the following purposes:

• Service delivery - To provide and maintain the Mailyond platform
• Email delivery - To send and receive support and transactional email across your domains
• Account management - To manage your account, subscriptions, and billing
• Communication - To send service updates, security alerts, and support responses
• Getting started emails - A few emails to help you set up Mailyond, such as a reminder if you haven't added a domain yet. You can unsubscribe from these at any time with the link in each email
• Improvement - To analyze usage patterns and improve our service
• Legal compliance - To comply with legal obligations and enforce our Terms of Service

We process your data based on the following legal grounds:

• Contract performance - Processing necessary to provide our services
• Legitimate interests - Improving our service, preventing fraud, and helping you get started with Mailyond
• Consent - When you provide explicit consent for specific processing
• Legal obligation - Complying with laws and regulations

We do not sell, trade, or rent your personal information to third parties. We share data only with trusted service providers who assist in operating our platform:

• Cloudflare - Hosting provider for infrastructure, databases (D1), and file storage (R2)
• Polar - Payment processing and subscription management
• Google OAuth - Authentication service (only if you choose to sign in with Google)
• Postmark - Sending and receiving email for your connected domains, and delivering our own account emails
• DataFast - Website analytics: pages visited, referrer, country, browser and device. It also records a few events, such as signing up, starting a trial, subscribing, clicking a link in one of our emails, and unsubscribing

All third-party providers are bound by data protection agreements and process data only as instructed. They do not use your data for their own purposes.

Storage location: Your data is stored on Cloudflare's infrastructure, which may include servers located in the European Union and other regions.

Security measures: We implement industry-standard security practices:

• Encrypted passwords using bcrypt hashing
• HTTPS encryption for all data in transit
• Secure authentication with session tokens
• Regular security audits and updates
• Access controls and monitoring

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

We retain your personal data for as long as your account is active or as needed to provide you services. Specific retention periods:

• Account data - Retained until account deletion is requested
• Email data - Retained for the lifetime of the workspace or until deletion
• Payment records - Retained for 7 years to comply with tax and accounting regulations
• Backup data - May be retained for up to 30 days in secure backups

If you are located in the European Union, you have the following rights under GDPR:

• Right to access - Request a copy of your personal data
• Right to rectification - Correct inaccurate or incomplete data
• Right to erasure - Request deletion of your personal data (see Account Deletion below)
• Right to restriction - Request limitation of data processing
• Right to data portability - Receive your data in a machine-readable format
• Right to object - Object to certain types of data processing
• Right to withdraw consent - Withdraw consent for data processing at any time

To exercise any of these rights, contact us at support@mailyond.com. We will respond within 30 days.

You can request account deletion at any time by emailing support@mailyond.com. Upon receiving your request, we will:

1. Verify your identity to ensure security
2. Delete your account and associated personal data immediately
3. Remove all connected domains, inbox data, and email records
4. Cancel any active subscriptions (no refunds for partial billing periods)

Please note that some data may remain in secure backups for up to 30 days before permanent deletion. Payment records will be retained for 7 years to comply with legal obligations.

We use cookies to:

• Maintain your logged-in session
• Remember your preferences
• Analyze site usage with DataFast, which sets a first-party datafast_visitor_id cookie to recognize returning visitors

You can control cookies through your browser settings. Disabling cookies may limit certain functionality of our service.

Our free DNS tools at mailyond.com/tools and our Chrome extension, SPF, DKIM, DMARC & MX Checker by Mailyond, work without an account. When you run a check:

• What is sent - Only the domain you check (for example example.com) is sent to mailyond.com. The extension reads the address of the current tab only when you click its icon, and sends just the domain: no path, page content or browsing history
• How it is checked - We look up the domain's public DNS records through DNS-over-HTTPS resolvers (Cloudflare, with Google as fallback) and return the result. We do not store or log the domain or the results
• Rate limiting - Your IP address is held briefly as a rate-limit key, one per type of check, and expires 10 minutes after your last check
• No tracking - The extension has no analytics, sets no cookies, sends no identifiers, and only keeps the last results in browser memory for 10 minutes, so reopening it on the same site doesn't check again. Closing the browser clears them
• Request logs - Like every request to mailyond.com, check requests appear in Cloudflare's standard request logs, which are kept for up to 7 days

Mailyond is a business tool intended for users aged 18 and older. We do not knowingly collect personal information from children under 18. If we discover that a child has provided us with personal data, we will delete it immediately.

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). When we transfer data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Data processing agreements with third-party providers
• Compliance with GDPR requirements for international transfers

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. Significant changes will be communicated via email. Continued use of our service after changes constitutes acceptance of the updated policy.

If you have questions about this Privacy Policy or our data practices, contact us at:

CraftCodely SRL

Email: support@mailyond.com

Location: Romania

For GDPR-related inquiries or to exercise your data rights, email support@mailyond.com with "GDPR Request" in the subject line.