Privacy Policy

MailWeave connects customer mailboxes, turns incoming messages into structured events, and sends those events to customer-configured webhook destinations. This policy explains how information is used when you visit the site or use the service.

Depending on how you use MailWeave, we process:

Customers may route personal, confidential, or otherwise sensitive information to MailWeave by forwarding email into a connected mailbox. MailWeave processes message content to provide the service. Do not connect a mailbox or route messages unless you have the rights, authority, and notices or permissions required to do so.

• Account details such as your name, email address, workspace name, and team membership.
• Mailbox connection details needed to connect an inbox.
• Email content received from connected mailboxes, including sender and recipient information, subject, text and HTML bodies, reply details, and received date.
• Structured email event details and attachment metadata such as filenames, content types, and sizes. Attachment contents are not included in webhook payloads.
• Webhook endpoint addresses, event delivery information, usage records, plan and subscription details, and information you send to support.

We use information to create and secure accounts, connect mailboxes, parse email, store structured events, route and retry webhook deliveries, enforce plan limits, display analytics and delivery history, process billing status, provide support, prevent abuse, and maintain the service.

Email bodies can include HTML. Parsing extracts message fields and attachment metadata; attachment contents are not currently forwarded. Webhook payloads may include extracted message content, so customers should configure destinations that are authorized and protected to receive it.

We retain account and mailbox information while it is needed to provide and protect your service. Mailbox connection credentials are protected with encryption. Email event history is automatically removed according to the workspace plan: 7 days for Free, 30 days for Pro, 90 days for Team, and 365 days for Enterprise. These periods apply to event history; other information may be retained as needed for service operation, security, billing, or legal obligations.

Workspace deletion removes workspace data associated with that workspace. Individual account deletion is not currently available in account settings. Contact support to request access, correction, or deletion; we will review the request and explain any information that must be retained.

We share information only as needed to provide the service, follow your instructions, protect MailWeave, or meet legal obligations. This may involve service providers that support MailWeave, the mail services you connect, webhook destinations you select, and payment services.

Paddle is MailWeave’s Merchant of Record for paid transactions. Paddle processes payment details, applicable taxes, and transaction records under its own terms and privacy information. MailWeave receives billing and subscription information needed to manage your plan. MailWeave does not receive or store full payment card details.

MailWeave uses necessary cookies and browser storage to keep you signed in and remember your appearance preference. We do not describe an advertising cookie program in this policy. Your browser settings can be used to manage cookies, though disabling necessary storage may prevent parts of the service from working.

We use safeguards designed to protect accounts, mailbox credentials, workspace access, and webhook traffic. No online service can promise that information is completely free from risk. MailWeave does not claim end-to-end encryption or a security certification.

Customers decide which mailboxes to connect, what messages to process, and where webhook events are delivered. Customers are responsible for having a lawful basis and any required permissions to collect, disclose, and route email content, and for informing people as required by applicable law.

Customers should avoid routing information they do not need, restrict access to workspaces and webhook endpoints, and protect their endpoint credentials. If a customer receives a data access, correction, or deletion request concerning email processed through their workspace, they should contact MailWeave so we can help identify the relevant stored event data.

You may ask us to provide, correct, or delete personal information associated with your account, subject to identity verification, applicable law, and records we must retain. Workspace administrators can manage team membership and delete workspaces using available product controls. Contact support.mailweave@gmail.com for a request. We will handle requests in accordance with applicable privacy laws.

If we become aware of a security incident affecting personal information, we will investigate, take reasonable steps to address it, and provide notices where required by applicable law.

We may update this policy as the service changes. We will update the date above when the policy changes. If a change materially affects how information is handled, we will provide notice through the service or another reasonable channel.

For privacy questions or requests, contact support.mailweave@gmail.com.

See our Terms of Service and Support page.