1. Introduction
Welcome to MailViewr ("we", "our", or "us"). We operate the website mailviewr.com(the "Service"). This Privacy Policy explains how we collect, use, and protect your information when you use our Service.
2. Information We Collect
We collect the following types of information:
- Account information: When you register, we collect your name, email address, and a hashed password. If you sign in via Google or GitHub OAuth, we receive your name and email address from those providers.
- Usage data: We may collect anonymised usage data such as pages visited, features used, and browser/device type to improve the Service.
- Email HTML content: HTML you submit through the preview tool is processed server-side to apply compatibility transformations. This content is not permanently stored unless you are signed in and explicitly save it. In the future, we may offer features such as saved templates or preview history, which would store your HTML content associated with your account. Any stored content will not be shared with third parties.
- Anonymous browser identifier: We store a randomly generated identifier in your browser's local storage to recognise returning visitors and understand how frequently the tool is used. This identifier contains no personal information and cannot be used to identify you as an individual. You can clear it at any time by clearing your browser's local storage.
- Canva design data: If you connect your Canva account, we temporarily access your Canva design metadata (design names, thumbnails) and export the HTML content of designs you explicitly select. We do not permanently store your Canva design content beyond what you choose to save as a template.
3. How We Use Your Information
- To create and manage your account.
- To send transactional emails (email verification, password reset).
- To improve and maintain the Service.
- To respond to support requests.
- To comply with legal obligations.
- To send you product updates, new feature announcements, and critical service notifications. You may opt out of non-critical communications at any time by clicking the unsubscribe link in any such email.
We do not sell, rent, or share your personal data with third parties for marketing purposes.
4. Third-Party Services
We use the following third-party services that may process your data:
- Google OAuth / GitHub OAuth: Used for social login. Their privacy policies apply when you choose to sign in via these providers.
- Vercel:Our frontend hosting provider. Your requests to the Service pass through Vercel's infrastructure. We also use Vercel Analytics to collect anonymised usage data (pages visited, browser/device type). No personally identifiable information is shared with Vercel Analytics.
- Railway: Our backend hosting and database infrastructure provider. Account data is stored on their servers.
- Brevo: Used to send transactional emails (verification, password reset) to your address via their SMTP relay infrastructure.
- Zoho Mail:Used to manage support communications sent to hello@mailviewr.com. If you email us for support, your message is processed through Zoho's servers.
- Canva: Users may optionally connect their Canva account via OAuth to import email designs into MailViewr. When connected, we request access to read your Canva design metadata and content solely to enable this import feature. We store your Canva OAuth access token and refresh token to maintain your connection. These tokens are encrypted at rest and are never shared with third parties. You can disconnect your Canva account at any time from your dashboard, which immediately revokes and deletes your stored tokens.
5. Cookies
We use a single HttpOnly cookie to maintain your authenticated session. This cookie does not track you across other websites and is strictly necessary for the Service to function. We also store an anonymous identifier in your browser's local storage solely to recognise returning visitors. No advertising cookies are used.
6. Data Retention
Account data is retained as long as your account is active. You may request deletion of your account at any time by contacting us at hello@mailviewr.com. We will delete your personal data within 30 days of a valid request.
7. Security
Passwords are stored as bcrypt hashes and never in plain text. Authentication tokens are transmitted via HttpOnly cookies over HTTPS. We apply reasonable technical and organisational measures to protect your data, but no method of transmission over the internet is 100% secure.
8. Children's Privacy
The Service is not directed at children under 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.
9. Your Data Protection Rights
If you are a resident of India, you have the following rights under the Digital Personal Data Protection Act, 2023 (DPDP Act):
- Right to access information about the personal data we hold about you.
- Right to correction of inaccurate or incomplete personal data.
- Right to erasure of your personal data where it is no longer necessary for the purpose it was collected.
- Right to grievance redressal — you may raise a complaint with us before approaching the Data Protection Board of India.
If you are located in the European Economic Area, you have additional rights under the GDPR including the right to data portability and the right to object to processing.
To exercise any of these rights, contact us at hello@mailviewr.com. We will respond within a reasonable timeframe.
10. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects when the policy was last revised. Continued use of the Service after changes constitutes acceptance of the updated policy.
11. Contact Us
If you have any questions about this Privacy Policy, please contact us at hello@mailviewr.com.