Privacy Policy

Who we are

KubeMail is operated by TitanCode Technologies ("KubeMail", "we", "us"). For any privacy question or request, contact us at yuval@titancode.co.il.

Data we collect

• Account data — your name, email address, organization name and a salted hash of your password. We never store your password in plain text.
• Sending configuration — the domains you add, their DNS verification status, API keys (stored only as hashes), webhook endpoints and your suppression list.
• Email data you send through KubeMail — sender and recipient addresses, subjects, message content, tags and the delivery events for each message (queued, delivered, bounced, complained, opened, clicked). When open or click tracking is enabled on a domain, we record the time of the event and the recipient's IP address and user agent.
• Billing data — paid plans are billed by Stripe. Card details are entered directly with Stripe and never reach our servers; we keep the Stripe customer and subscription identifiers.
• Technical data — sign-in sessions (with the device user agent) and server logs used for security and abuse prevention.

The iOS app does not contain advertising or third-party analytics SDKs, does not track you across other apps or websites, and does not access your contacts, photos or location.

How we use data

• To provide the service: authenticate you, deliver your email and report delivery results to you.
• To protect deliverability: honor unsubscribes, bounces and complaints, and detect spam or abuse.
• To bill paid plans and send service and security notices.

We do not sell personal data and we do not use it for advertising.

Your customers' data

For the email you send through KubeMail, you are the controller of your recipients' data and KubeMail processes it on your behalf, only to deliver your messages and report on them. You are responsible for having a lawful basis and consent to email your recipients. Recipients can unsubscribe from any marketing message using the link included in it.

Service providers

• Cloudflare — hosts the website, the API and the database.
• OVHcloud (France) — hosts our mail transfer servers and delivery logs.
• Stripe — payment processing for paid plans.

These providers process data only on our instructions and under their own security and privacy commitments.

Retention

• Delivery logs and events are kept according to your plan (3, 30 or 90 days) and deleted automatically after at most 90 days.
• Aggregated, non-personal statistics may be kept for up to 13 months.
• Account data is kept for as long as your account exists.

Deleting your account

You can delete your account at any time in the iOS app under Account → Delete account, or by emailing yuval@titancode.co.il from the address on the account. Deleting an organization owner's account removes the organization with its domains, API keys, webhooks and suppression list and cancels any subscription. Remaining delivery logs expire on the schedule above.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data and to object to or restrict its processing. Email us and we will respond within 30 days. You may also lodge a complaint with your local data protection authority.

Security

All traffic is encrypted with TLS, DKIM private keys are encrypted at rest, and passwords and API keys are stored only as hashes. Access to production systems is restricted to authorized staff.

Children

KubeMail is a business service and is not directed at children under 16.

Changes

We will post any changes to this policy on this page and update the date above. Material changes will be announced by email to account owners.