Privacy Policy

Last updated: October 10, 2026

Mai1 («we», «our», or «us») provides email hosting services. This Privacy Policy explains what personal data we collect, how we use it, and your rights.

1. Who we are

Mai1 is an email hosting service operated by an independent provider. For privacy-related questions, contact contact@mai1.top.

2. Data we collect

Account data: email address, name (if provided), payment information (processed by our payment provider — we do not store full card numbers), and billing address.

Service data: domain names you connect, DNS records we generate, mailbox contents (emails, attachments, contacts), traffic metadata (sender, recipient, IP addresses, timestamps), and API/MCP usage logs.

Support data: messages you send to our support, and any information you choose to share with us.

We do not sell personal data. We do not scan your emails for advertising purposes.

3. How we use your data

• To provide the email service: receive, store, and deliver your messages.
• To operate and improve the service: monitor performance, detect abuse, and fix issues.
• To communicate with you: billing, service updates, support responses.
• To comply with legal obligations: respond to lawful requests, enforce our Terms.

4. Service providers

We use the following providers to operate Mai1:

• Stalwart Mail Server — email storage and protocol handling (IMAP, JMAP, SMTP).
• SMTP2GO — outbound email relay for managed AI sending. Certified ISO 27001:2022. Subprocessors: Vultr (SOC 2 Type II), Leaseweb (SOC 2 Type II). DPA available.
• Payment processor — handles billing; we do not store full credit card data. DPA available on request.
• Hosting provider — server infrastructure. DPA available on request.

Each provider processes data only as necessary to deliver the service and is bound by contractual data protection obligations.

5. Data retention

• Mailbox contents: retained while your account is active. Deleted messages are removed within 30 days. Backups may retain data for up to 90 days.
• Account and billing data: retained for the duration of your account plus the period required by applicable tax and accounting laws.
• Traffic and security logs: retained for up to 24 months for security and abuse prevention.

6. International transfers

Our servers are located in the European Union and the United States. By using Mai1, you acknowledge that your data may be transferred to and processed in these jurisdictions. We ensure appropriate safeguards (Standard Contractual Clauses or equivalent) for cross-border transfers where required.

7. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (subject to legal retention requirements).
• Export your mailbox contents.
• Object to or restrict processing.
• Withdraw consent where processing is based on consent.

To exercise your rights, email contact@mai1.top. We will respond within 30 days. We may ask you to verify your identity before acting on a request.

8. Security

We implement technical and organizational measures to protect your data: encryption in transit (TLS), access controls, tenant isolation, and regular security reviews. However, no system is 100% secure. If you discover a vulnerability, please contact us at contact@mai1.top or via security.txt.

9. Children

Mai1 is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or through the service. Continued use after changes means you accept the updated policy.

11. Contact

Email: contact@mai1.top
Security: /.well-known/security.txt