Your privacy matters.

1. Who we are and how to contact us

MailTrum is operated by Mailtrum, based in Bangladesh. This policy explains how we handle information when you visit our website, contact us, manage a workspace or use our hosted email service.

For privacy questions or requests about your information, email contact@mailtrum.com or use our Contact Us page. If your mailbox is managed by an employer or another organization, contact that organization first about its use of your email and its retention rules.

2. Information we process

• Account information: your name, email address, password hash, verification status, account preferences and security settings.
• Workspace information: organization names, memberships and invitations, roles, domains and DNS records, mailbox addresses, display names, quotas, usage and alias destinations.
• Email information: messages, attachments, sender and recipient addresses, delivery queues and operational records needed to provide hosted email. Email content is held on our mail services; it is separate from the website’s account and billing records.
• Billing information: purchased mailbox quantities, billing periods, invoices, amounts, taxes, currencies, payment and refund status, and payment-provider identifiers. Provider records may include a payment method’s brand and last four digits.
• Support information: your name, email address, selected topic, message and related correspondence when you contact us.
• Security and service information: session identifiers, IP addresses, browser or device information, access timestamps, audit events, delivery information and abuse-prevention records.

We obtain information from you, your organization’s administrators, email senders and recipients, and the providers involved in delivering or paying for the service. Please do not include passwords, recovery codes or full payment-card details in a support message.

3. How we use information

We use information to create and secure accounts, verify ownership, provision and operate domains and mailboxes, send and receive email, manage permissions, calculate usage and subscription entitlements, collect payments, answer requests and maintain service records.

We also use operational information to prevent spam, fraud and unauthorized access, diagnose failures, enforce our Terms and meet applicable legal obligations. Where data-protection law requires a legal basis, these activities rely on performing our agreement with you, complying with legal obligations, and our legitimate interests in providing a secure and reliable service. Where an activity requires consent, you can withdraw that consent by contacting us.

Providing the required account and payment information is necessary to supply the service. The Contact Us form is optional; without a return email address, we cannot respond to your request.

4. Organization administrators and email data

Organization owners and authorized administrators can manage memberships, domains, mailboxes and billing according to their roles. They control which people can use an organization’s mailboxes and may request changes, suspension or deletion of those resources.

Your organization is responsible for deciding how it uses its business email, notifying its users and meeting its own obligations concerning message content. We process hosted email to provide and secure the service. If your request concerns an organization-controlled mailbox, we may need instructions or authorization from that organization before acting.

5. Service providers and other disclosures

Information is shared as needed with hosting and infrastructure providers, our email-delivery services, payment providers and people authorized to administer your workspace. Sending email necessarily shares the message and addressing information with its recipients and the mail systems involved in delivery.

Lemon Squeezy provides hosted checkout and payment collection. We send the information needed to associate payments with your account and selected subscription. Full card numbers and card security codes are entered on hosted checkout rather than collected through MailTrum’s own forms. Lemon Squeezy handles its own payment information under its Privacy Policy.

We may also disclose information when required by applicable law or a valid legal request, to protect people and the service, or in connection with a business transfer subject to appropriate handling of the information.

6. Cookies and browser storage

We use session cookies to keep you signed in and protect account access. Webmail uses its own session and routing cookies. Browser storage remembers preferences such as your theme and selected organization, and identifiers needed to continue or safely retry checkout and billing actions.

The current MailTrum website does not include advertising or third-party analytics trackers. Hosted checkout and webmail may use storage necessary for their own services. You can clear or block cookies and browser storage through your browser settings, but signing in, webmail or checkout continuation may then stop working.

7. Retention and deletion

Account, workspace and email data are kept while needed to provide your service and handle your instructions. Ending a subscription stops renewal and can suspend mailbox access after paid coverage ends; it does not automatically delete existing email or close the account. Export messages you need while your mailbox is accessible, and contact us to arrange account or organization-data deletion.

Deleting a mailbox is separate from cancelling its purchased capacity. Some resource records, audit history, security information and payment records may be retained to meet legal obligations, prevent misuse, reconcile payments and resolve disputes. We determine retention from the type of record, its operational purpose, applicable obligations and outstanding requests or disputes. A deletion request does not promise immediate erasure from every backup or third-party payment record.

Contact-form messages are encrypted while awaiting delivery. The delivery queue clears the message body after successful delivery and expires an undelivered contact message after seven days. The resulting email and any follow-up correspondence may be kept in our support inbox while needed to resolve the request and retain an appropriate support record.

8. Security and international processing

We use measures including password hashing, access controls, secure sessions, encrypted temporary credentials and encrypted sensitive delivery payloads. Access is limited according to service roles. No internet service can guarantee absolute security, and MailTrum does not describe ordinary hosted email as end-to-end encrypted.

Mailtrum is based in Bangladesh. Service providers and the email systems involved in delivery may process information in other countries. Where applicable law requires safeguards for an international transfer, those requirements apply. Contact us if you need information about data handling for your organization before using the service.

9. Your choices and privacy rights

You can update supported profile and security settings in your account. Depending on applicable law, you may also request access to, correction, deletion or a copy of your information, restrict or object to certain processing, or withdraw consent where processing depends on consent. You may raise a complaint with the competent data-protection or other supervisory authority where those rights apply.

Send requests to contact@mailtrum.com. We may ask for information needed to confirm your identity and authority over the account, and may need your organization’s involvement. Some requests may be limited by legal obligations, other people’s rights or information that must be retained for a lawful purpose.

10. Updates to this policy

We may update this policy when the service or its data practices change. The date at the top identifies the current version. Material changes will be communicated through the website or an appropriate account notice.