Saleto Mail Privacy Policy

Effective: June 21, 2026 · Last updated: June 28, 2026

Simple yes Corp ("Saleto", "we", "us", or "our") operates Saleto Mail. This Privacy Policy explains how we collect, use, disclose, and protect information when you use our websites, mailboxes, protocols, and related communication services (the "Service"). By using the Service, you agree to the practices described here.

1. Information We Collect

Account and Profile Information

• Identity Data: Name, mailbox address, and account passwords. Passwords are cryptographically hashed upon creation, never stored in plaintext, and cannot be read by our staff.
• Verification & Recovery: Date of birth, mobile phone number, and alternate (backup) email addresses utilized strictly for verification, security, and account recovery.
• Preferences: Invite codes, local timezone, email signatures, display layouts, and mailbox configurations.

Email Content, Metadata, and Communications

• Mailbox Data: Messages you send, receive, and store, including headers, routing data, body text, HTML markup, embedded elements, and file attachments.
• Organizational Data: Folder structures, custom labels, read/unread flags, tracking tags, and communication rules.
• Security Lists: Address book entries, safe sender lists, blocked domains, and distrusted sender configurations that you manage.

Technical, Protocol, and Connection Data

• Access Logs: IP addresses, browser types, operating system identifiers, timestamps, and direct API requests.
• Mail Server & Sync Logs: Inbound and outgoing connection records, including mail server IP addresses used for authentication handshakes (SPF, DKIM, DMARC verifications), and synchronization logs from standard email protocols (such as SMTP, IMAP, or POP3 connections).
• SMS Delivery Logs: Transactional metadata generated when you request a one-time passcode via our telecommunications infrastructure.

2. Our Core Privacy Guarantee & How We Use Data

Our Commitment to Your Privacy: We do not read, analyze, or scan the contents of your email messages, attachments, or metadata to build profiles or serve targeted advertisements. Automated scanning is performed strictly for functional, security-related mailbox operations.

We use your information exclusively to:

• Operate the Service: Provide, maintain, optimize, and troubleshoot mailbox hosting, mail routing, search indexing, and synchronization across devices.
• Protect Your Mailbox: Run automated server-side filters to detect and block spam, malicious tracking pixels, phishing attempts, viruses, and malware.
• Ensure Security: Authenticate user accounts, monitor for unauthorized access attempts, and prevent systemic abuse or platform fraud.
• Deliver Communications: Send transactional notifications and automated SMS verification codes that you explicitly trigger.
• Maintain Compliance: Comply with applicable legal obligations, enforce our terms of service, and protect the rights and safety of our users.

We do not sell your personal information or email data to anyone.

3. SMS and Phone Numbers

We use your phone number only for security-related SMS messages you explicitly request, such as signup verification, multi-factor profile authentication, and password reset codes. Message frequency is limited (typically up to 5 SMS per month when you request codes). Message and data rates may apply. Reply STOP to opt out where supported. Mobile opt-in data and consent are strictly confidential and are not shared with third parties for their own marketing programs. See SMS Opt-In.

4. How We Share Information

We only share information with third parties in the limited circumstances outlined below:

• Subprocessors and Service Providers: We partner with trusted infrastructure providers—such as Amazon Web Services (AWS) for secure cloud hosting, storage, and mail delivery infrastructure—and telecommunications providers for SMS delivery. These vendors operate under strict contractual data protection agreements limiting their data use solely to providing services to us.
• Intended Recipients: The recipients of your email messages receive the exact content, headers, and attachments you choose to send them.
• Legal & Safety Requirements: We may disclose information if required to do so by enforceable law, court orders, subpoenas, or when necessary to protect the safety, properties, and vital rights of our users or the platform.
• Business Operations: In the event of a merger, acquisition, restructuring, or sale of assets, your data may be transferred, subject to the buyer maintaining the commitments established in this Privacy Policy.

5. Cookies, Sessions, and Local Storage

The Saleto Mail web application uses secure browser local storage and session tokens to maintain your authenticated login state, keep your session active, and remember interface preferences (such as folder sort order and theme selection).

We do not use third-party advertising, tracking, or marketing cookies within the authenticated mailbox application.

If you use the free (ad-supported) mailbox tier on public or free-tier surfaces, advertisements may be served by Google AdSense. Google and its partners may use cookies or similar technologies to serve ads and measure performance. You can manage personalized advertising at Google Ad Settings and review Google’s advertising policy. Premium mailboxes configured as paid without ads do not load AdSense in the mailbox application.

6. Data Retention and Deletion Timelines

We retain your account profile and mailbox contents for as long as your account remains active.

• Production Deletion: When you initiate an account deletion through your profile settings, all associated personal data, mailbox archives, configuration settings, and metadata will be permanently purged from our active production databases within 30 days.
• Backup Lifecycle: Disconnected, encrypted disaster recovery backups containing snapshot remnants of deleted accounts are automatically rotated, overwritten, and entirely purged within a maximum of 60 days from the date of account deletion.

7. Your Choices and Data Portability Rights

• Profile Management: You can review, update, or correct your profile information and security options at any time inside your mailbox settings.
• Data Portability (Mail Export): You maintain full ownership over your communication data. You have the right to export your entire mailbox history, folder structures, and contacts in standard industry formats (such as .mbox or .eml) directly through your account dashboard at any point prior to closing your account.
• Account Termination: You can choose to permanently close your account and wipe your data via your Profile Settings page.
• Regional Rights: Depending on your location, you may have additional statutory rights (such as access, rectification, or restriction under regulations like the GDPR or CCPA) which can be exercised by contacting our privacy team.

8. Security Infrastructure

We deploy administrative, technical, and physical safeguards designed to defend your communication infrastructure. This includes complete encryption in transit using high-grade HTTPS/TLS protocols for all incoming and outgoing connections, robust interior access controls, and partitioning across highly secure, industry-compliant data center facilities. However, because no method of data transmission over the internet or electronic storage is entirely infallible, we cannot guarantee absolute security.

9. Children's Privacy

The Service is not intended for or directed toward children under the age of 13. We do not knowingly collect or maintain personal information from children under 13. If we discover that a child under 13 has provided us with personal information, we will take immediate steps to delete that data from our systems.

10. International Data Transfers

Saleto Mail operations and servers are managed primarily in the United States. If you are accessing the Service from outside the United States (including the European Union, Canada, or the Asia-Pacific region), please note that your information will be transferred to, stored, and processed in the United States, where our central infrastructure operates.

11. Policy Modifications

We may update this Privacy Policy periodically to reflect shifts in our features, operational changes, or updating legal landscapes. When updates occur, we will adjust the "Last updated" date at the top of this policy. For any material changes affecting how we handle your personal data or email contents, we will provide a prominent notice directly within the application layout or via your primary contact email address before the changes take effect.

12. Contact Us

For privacy questions, access requests, or policy inquiries, please contact our compliance department:

Simple yes Corp
11551 Harry Hines Blvd, Dallas, TX 75229, USA
Email: privacy@saleto.com
Phone: +1 (833) 309-5145