Xipher Mail legal information
Privacy Policy
This Privacy Policy describes what data Xipher Mail processes, why we process it, how long we retain it, and how users can contact us about security or privacy matters.
1. Data we process
Xipher Mail processes mailbox-linked identifiers such as display name, mailbox address, XAccount user ID, session and device metadata received from XAccount, network risk signals, mailbox content, message headers, attachment metadata and technical delivery logs.
XAccount, the central identity platform for the ecosystem, processes credentials, authentication factors, token lifecycle data, device trust state and related account protection records.
Security systems may also process IP-related telemetry, anti-abuse counters, challenge verification data, and service health logs required to keep the platform available and to investigate fraud, spam, phishing or other prohibited activity.
2. Why we process data
We process data to create and secure mailbox accounts, authenticate users, deliver and store email, prevent abuse, investigate incidents, maintain reliability, enforce service rules, and satisfy applicable legal obligations.
We do not needlessly collect unrelated device permissions, contact books, location data, call logs or advertising identifiers for the core mailbox service.
3. Security and retention
Xipher Mail uses transport security, JWT-based session validation, service-side abuse detection and operational access restrictions. Credential storage, authentication policy and token issuance are handled centrally by XAccount. Security and operational records may be retained for fraud prevention, diagnostics, incident response and compliance.
Retention periods depend on the category of data and operational necessity. Mailbox content remains available while an account is active unless content is deleted or removal is required by law, policy enforcement or infrastructure recovery needs.
4. Sharing and disclosure
We may use service providers that support infrastructure, storage, delivery or security operations. We may disclose information when required to enforce service rules, respond to abuse, protect users, comply with law, or defend the security of the platform.
5. User responsibilities and contact
Users must keep credentials protected, use only mailboxes they are authorized to control, and avoid unlawful or abusive messaging. Questions about privacy, security or account access can be sent to support@xipher.pro.