Privacy Policy
Last updated: September 2026
1. Information We Collect
We collect information you provide when creating an account (email address, name, account slug) and information generated through your use of the Service (email messages, API logs, usage metrics). We also collect IP addresses for rate limiting and security purposes.
2. Trying Robotomail Without an Account
You can try the Service at robotomail.com/try before creating an account. When you start a trial, we store the email address you enter, your name if you choose to give it, and a hashed form of your IP address. We process this data because you ask us to: the trial runs only when you start it, and the demo email goes only to the address you typed. The demo email itself tells the recipient why they received it. The trial mailbox and its messages are deleted within about 24 hours of the trial expiring, or as soon as you convert the trial into an account. If you do not create an account, the email address, name, and hashed IP are removed from the expired trial record after 7 days. We keep only anonymous counts for product and abuse metrics.
3. How We Use Your Information
We use your information to provide and improve the Service, enforce rate limits and acceptable use policies, send transactional emails (password resets, account notifications), and respond to support requests.
4. Email Content
Email messages sent and received through the Service are stored in our database and object storage infrastructure. We do not read, analyze, or use the content of your emails for advertising or any purpose beyond providing the Service. Email content is accessible to the account holder and integrations they authorize.
5. Data Storage and Security
Your data is stored on secured infrastructure. API keys are hashed with SHA-256 before storage — we cannot retrieve your raw API key after creation. Webhook payloads are signed with HMAC-SHA256. Attachments are stored in encrypted object storage.
6. Data Sharing
We do not sell your personal information to third parties. We may share your information only in the following circumstances: with integrations you explicitly authorize (see section 15), with third-party service providers who assist in operating the Service (see section 7), when required by law or to comply with legal process, or in connection with a merger, acquisition, or sale of assets, in which case you will be notified of any change in ownership or use of your personal information.
7. Third-Party Services
We use the following third-party services: Stripe for payment processing, Resend for outbound email delivery, and Cloudflare R2 for attachment storage. Each operates under their own privacy policies.
8. Data Retention
Account data is retained as long as your account is active. Email messages are retained indefinitely in our database unless you delete them via the API. Messages are purged from the mail server 7 days after processing. You may request deletion of your account and all associated data at any time.
9. Your Rights
You have the right to access, correct, or delete your personal data. You may restrict or object to the processing of your data, and you have the right to data portability. You may export your data via the API at any time. To request account deletion or exercise any of these rights, contact us at the address below.
10. Cookies
We use session cookies for authentication on the dashboard. We do not use tracking cookies or third-party analytics on our marketing pages.
11. Children's Privacy
The Service is not intended for use by anyone under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete that information promptly.
12. International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We take appropriate safeguards to ensure your information remains protected in accordance with this Privacy Policy.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes via email or a notice on the Service.
14. Contact
For privacy-related questions, contact us at privacy@robotomail.com.
15. Optional AI and MCP Connections
If you connect Robotomail to ChatGPT, Claude, or another MCP app, you authorize the permissions displayed on the consent screen for that app. Depending on those permissions and your requests, we share your account identity and verified email address, mailbox addresses, message metadata, selected plain-text email content, and sending results with the app you connect (OpenAI for ChatGPT, Anthropic for Claude, or the operator identified on the consent screen). Sending permission lets that app submit recipients, subjects, and content to Robotomail for delivery. These connections do not download attachments or receive your full chat history. Your Robotomail password and API keys are not shared. We store each account connection, its granted permissions, and OAuth credentials. Access tokens expire after 10 minutes and refresh credentials after 30 days. Disconnecting an app on the Connections page in Robotomail revokes its further access and removes its stored grant and token records. Other app connections stay active. Disconnecting does not delete your emails or information already shared with an app. Each app's own policies and your settings there govern information already shared with it.