Privacy Policy

Introduction

W3B.EMAIL ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email service.

Please read this Privacy Policy carefully. By using our Service, you consent to the practices described in this policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

1. Information We Collect

Account Information

When you register for an account, we collect:

• Username: Your chosen username for your @w3b.email address
• Email Address: Your assigned email address (username@w3b.email)
• Wallet Address: If using Web3 authentication, your Ethereum wallet address
• Account Credentials: Your authentication credentials are securely stored
• Account Creation Date: Timestamp of when your account was created

Authentication Data

For Web3 wallet users:

• Cryptographic Signatures: Signatures used to verify wallet ownership are encrypted and stored
• Nonce Values: Temporary cryptographic nonces used to prevent replay attacks (expire after 5 minutes)

Email Content

Your email messages, attachments, and associated metadata (sender, recipient, subject, timestamps) are stored on our email servers to provide the service.

Usage Information

We may automatically collect:

• Log data (IP address, browser type, access times)
• Device information
• Service usage patterns and statistics

2. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve our email service
• Authenticate your identity and secure your account
• Process and deliver your emails
• Send you important service-related communications
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations
• Aggregate anonymous usage statistics to improve our service

3. Data Storage and Security

Security Measures

We employ industry-standard security measures to protect your data:

• SSL/TLS: All data transmitted between your device and our servers is encrypted using SSL/TLS
• Secure Authentication: For Web3 users, authentication is handled through cryptographic signatures
• Access Controls: We implement appropriate access controls to protect your data

Data Storage

Your data is stored on secure servers. Account data is stored in encrypted form, and email content is stored on our email infrastructure (Mailcow) with appropriate access controls.

Security Practices

While we implement robust security measures, no method of transmission over the Internet or electronic storage is 100% secure. We continuously work to protect your data but cannot guarantee absolute security.

4. Third-Party Services

We use third-party services to provide our email functionality:

• Mailcow: Our email infrastructure provider for IMAP/SMTP services

These third parties have access to your data only to perform specific tasks on our behalf and are obligated to protect your information. They are not permitted to use or disclose your information for any other purpose.

5. Cookies and Tracking

We use cookies and similar tracking technologies to:

• Maintain your session state
• Remember your preferences
• Analyze service usage

You can configure your browser to refuse cookies, but some features of our Service may not function properly as a result.

6. Your Rights

Depending on your location, you may have the following rights:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your account and associated data
• Portability: Request a copy of your data in a portable format
• Objection: Object to certain processing of your data

To exercise these rights, please contact us at support@w3b.email

7. Data Retention

We retain your information for as long as your account is active or as needed to provide services to you. Specifically:

• Account Data: Retained until account deletion
• Email Content: Retained until account deletion or until you delete specific emails
• Authentication Nonces: Automatically deleted after 5 minutes
• Log Data: Retained for up to 12 months for security and debugging purposes

Upon account deletion, your data will be permanently removed within 30 days, unless retention is required by law.

8. Information Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information only in the following circumstances:

• Service Providers: With third parties who perform services on our behalf
• Legal Requirements: When required by law, subpoena, or legal process
• Protection of Rights: To protect our rights, privacy, safety, or property
• Business Transfers: In connection with a merger, acquisition, or sale of assets

9. Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to delete such information promptly.

Users between 13 and 18 years old should use our Service only with parental consent and supervision.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. By using our Service, you consent to such transfers. We take appropriate measures to ensure your information remains protected in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

You are advised to review this Privacy Policy periodically for any changes. Your continued use of the Service following any modifications constitutes acceptance of the updated Privacy Policy.

12. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: