What we store, and who can read it

imado is operated by Zivaro Software Inc., a Delaware C corporation. When this page says “we”, it means that company. Questions go to ashish.so@zivaro.ai.

• Your account. Name, email address, and a password stored hashed, in a form nobody can read back. We never store the password itself.
• Your domains. The domain names you connect, the DNS records we ask you to publish, and the identifiers our mail provider issues for them.
• Your mail. The messages you send and receive, their attachments, and the original raw message exactly as it arrived. The raw copy is kept so a message can be processed again if we improve how mail is parsed, so a parsing bug can be fixed without losing what it damaged. Drafts are kept too, and everyone who reads the mailbox can see them.
• Operational records. Sign-in times, the IP address a request came from, and delivery outcomes such as bounces, and each browser signed in to your account. The IP address is used for rate limiting and abuse investigation, and shown to you beside each signed-in device on your Account page, and nothing else.
• People you invite. Their email address, and the role and mailboxes you chose for them.
• Your settings. The sending name you chose for a mailbox, and the reading and notification settings you changed.
• API keys you made. Each key's name and a fingerprint of it, never the key itself.
• Apps you connect. Which app, which mailboxes it may read, what else you allowed it to do, when it was last used, and each change it made to your setup.
• Notifications. If you turn them on, the address your browser's push service gives that device.
• Your packs, if you buy any. Which packs you have, your renewal date, and the reference Link gives your purchase. Your card or other payment details are never sent to us: Link holds them.
• Site analytics. Vercel Analytics on our public pages and the pages around signing in, never inside your mailbox or Setup. It counts visits without cookies and without building a profile of you.

Nobody at Zivaro Software Inc. can sign into your account and read your inbox.

Our staff tooling has no way to sign in as someone else, so there is no support button that opens somebody's mailbox. The operator's view of the product (how many accounts and domains there are, what is in flight, how mail is landing) shows counts, domain names, and the name and sign-in email address of each account holder. It never shows a message.

A small number of people can reach the underlying storage, because somebody has to be able to operate and repair the system. They do so to fix a fault, to answer a request you made, or to investigate an abuse report, and not otherwise.

We do not read your mail to target advertising, we do not sell it or share it with data brokers, and we do not use it to train machine learning models.

An app you connect, such as Claude or ChatGPT, reads the mailboxes you choose for it. The text of the mail it reads goes to the company that runs the app, under that company's own terms. On a mailbox other people read, their apps can read it too, and everyone who reads it can see which apps can, under Mail → Settings. You can disconnect an app from your Account page at any time.

• To run the product: deliver your mail, show it to you, and keep your account working.
• To protect it: rate limiting, abuse investigation, and keeping the service delivering for everyone on it.
• To talk to you: service notices, and replies when you write to us.
• To take payment for packs you buy, and to keep the records tax law asks for.
• To meet a legal obligation, where one genuinely applies.

Everything is hosted in the United States. If you are writing from elsewhere, your mail is being stored there.

• Amazon Web Services — sending and receiving mail, and storing the raw messages.
• PlanetScale — the database holding accounts, domains, and parsed messages.
• Vercel — hosting for the application and the marketing site, and the site analytics above.
• Stripe, through Link — only if you buy packs. Link sells them on our behalf, so it receives your name, email address, billing address and payment details, and a tax ID if you give one, and keeps them under its own privacy policy. We send it your account's name, the email address of the person buying, and a reference to the account, and nothing about your mail.

These are the only third parties we give your data to. If that list changes, this page changes with it. Two more receive some of it when you choose:

• An app you connect — the text of the mail it reads, as above.
• Your browser's push service, run by the company that makes your browser — if you turn on notifications, it carries each one to your device. The notification is encrypted for your browser, so the push service cannot read it.

Your mail stays for as long as you want it. Deleting a mailbox in the product stops it receiving and frees its addresses, and keeps the mail it holds. Removing a domain does the same for every address on it. When you want a mailbox's mail, a domain's, or your whole account removed, write to us and it is done within 30 days: the parsed messages, the attachments and the raw copies together. Backups roll off a little later, and nobody can search them in the meantime.

Operational records (sign-in times, the address a request came from, delivery outcomes) are kept for the life of your account and removed with it. A shorter window is planned, and this page will carry the number when it applies.

If you bought packs, Link keeps the payment and tax records for as long as tax law requires, which can be longer than your account.

You can ask us for a copy of everything we hold about you, ask us to correct it, or ask us to delete your account entirely. Write to ashish.so@zivaro.ai and we will do it within 30 days. A person handles each request.

• Everything travels over TLS, and our storage providers encrypt it at rest.
• Passwords are stored hashed, never in a form anyone can read.
• Sign-in and mail-sending endpoints are rate limited, in shared storage so the limit holds across every server.
• Access to production storage is limited to the people who operate the service.

The security page lists what is in place and what is not yet; the terms' reliability clause says what we promise about your mail and what we do not.

When you open a message, the images its sender included load from the sender's servers, as they do in most mail apps. That can tell the sender that the message was opened, when, and from which network. We intend to load images through our own servers instead, so that a sender sees us rather than you, and this page will say so when that is live. Until then, Mail → Settings lets you have images ask each time, or never load.

We set the cookie that keeps you signed in, and one that tells us your time zone so the inbox can group mail by day. Your light or dark theme preference is stored in your browser and never sent to us. There are no advertising or tracking cookies.

Your browser also keeps a copy of your recent mail, so the inbox opens at once. It is encrypted with a key that is destroyed when you sign out, and Mail → Settings lets you choose how much is kept, or clear it.

imado is not intended for anyone under 16, and we do not knowingly create accounts for them.

When this policy changes in a way that matters, we will email account holders before it takes effect rather than quietly editing the date at the top.