Privacy policy

Senin Mail is a web-based email client that lets you read and send mail from your existing accounts in one place. This policy explains how we handle information when you use the Senin Mail website and app.

Your mail stays with your email provider (for example Google or Microsoft). Senin Mail connects to it on your behalf and shows it to you.

Your Senin Mail account. Your name, email address and a salted hash of your password (never the password itself).

Connected mailboxes. For each account you connect: the provider, the email address and display name, and either OAuth tokens (Google, Microsoft) or an IMAP/SMTP password. All tokens and passwords are encrypted before they are stored.

Mail data. To show your inbox quickly we keep a cache of message details: sender, recipients, subject, a short preview, date, folder and read/starred state. When you open a message we also keep its body and attachment list. Message content is otherwise fetched from your provider on demand.

Files you attach. Attachments you add while writing are held privately until the message is sent or discarded, and are deleted after at most 24 hours either way.

Drafts. Drafts are saved in your own mailbox's Drafts folder, not on our servers (a local copy may be kept in your browser if saving fails).

Messages you send us. If you use the contact form we keep your name, email address, topic and message so we can reply.

Technical data. A session cookie, and standard server logs. Your IP address is used briefly for rate limiting to prevent abuse.

Only to run the service you asked for:

• to sign you in and keep your session secure;
• to connect to your mailboxes, sync them and perform actions you request (read, move, send, delete);
• to show your inbox quickly using the cache described above;
• to answer your messages and provide support;
• to detect abuse and keep the service secure and reliable.

We do not use your mail for advertising, we do not sell it, and we do not use it to train general AI models.

Senin Mail's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

We request the gmail.modify permission so you can read, flag, archive, move and send mail from your Gmail account inside Senin Mail. We use Google user data only to provide and improve these user-facing mail features. We do not transfer it to others except as needed to provide those features, to comply with law, or as part of a merger or sale with notice to you. We do not use it for advertising. People at Senin Mail do not read your mail unless you ask for support, it is needed to investigate abuse or security issues, or the law requires it.

For Outlook and Microsoft 365 accounts we request the Mail.ReadWrite, Mail.Send and offline_access permissions, and use them in the same limited way: to show and manage your mail and to send messages you write.

We don't sell your information. We use infrastructure providers (such as hosting and database services) who process data on our behalf under appropriate terms, and the mail providers you connect, which receive the actions you ask for (for example, sending a message through Gmail). We may disclose information if the law requires it.

• Cached message details: until you disconnect the account or delete your Senin Mail account.
• Attachments awaiting sending: at most 24 hours.
• Connection credentials: until you disconnect the account. For Google accounts the token is also revoked.
• Contact messages: as long as needed to respond and keep records.

To delete an account's data, disconnect it from the sidebar. To delete your whole Senin Mail account, contact us.

Credentials are encrypted with AES-256-GCM, every request is checked against the signed-in user, received HTML is sanitised and sandboxed, and we apply rate limits. See the security overview for details. No system is perfectly secure, and we can't guarantee absolute security.

We use one essential session cookie to keep you signed in. Your browser's local storage keeps preferences you choose: theme, whether images load automatically, whether designed emails use a dark view, and a fallback copy of a draft if it couldn't be saved. We don't use advertising or third-party tracking cookies.

You can disconnect any mailbox at any time, change your image and theme preferences, and ask us to access, correct or delete your information by contacting us. Depending on where you live you may have additional rights, such as objecting to or restricting processing, or complaining to a data-protection authority.

Senin Mail is not directed to children under 13 (or the higher minimum age in your country), and we don't knowingly collect their information.

We'll update this page when our practices change and revise the date at the top. For significant changes we'll take reasonable steps to let you know.

Questions about privacy? Use the contact form or email support@softexsolution.com.