Privacy policy

Mailgestor Cloud is operated by eNetIdeas Ltd ("eNetIdeas", "we"), a company registered in England and Wales under number 07465254, with its registered office at 3rd Floor, 86-90 Paul Street, London EC2A 4NE. This policy explains what personal data we handle when you use Mailgestor Cloud at app.mailgestor.com and our website, why, and what your rights are.

Mailgestor exists to take a mailbox out of Google or Microsoft, hand you the files, and delete our copy. That shapes everything below: we keep as little as we can, for as short a time as we can.

Two roles

Your account data. For the details you give us to run your account — your name, email address, password, team membership, billing records and the audit log of what your account did — eNetIdeas is the data controller.

Archived mailbox content. For the mail, calendar events and contacts we archive on your instruction, you (or the organisation you act for) are the controller and eNetIdeas is your processor. We act only on your instructions, which are the jobs you create in the app, and the terms of processing are set out in our Terms of Service.

What we collect and why

Data	Purpose	Lawful basis
Email address, name, password hash	Creating and securing your account, signing you in, sending you service email such as job completion notices and invitations	Contract
Provider credentials (OAuth tokens, service account delegation, admin consent)	Reading the mailboxes you ask us to archive. Encrypted under a key unique to your account; never displayed or logged	Contract
Archived mailbox content: messages, attachments, calendar events, contacts	Building the archive and the export files you request; letting you browse the archive in the app	Processed on your instruction (you are the controller)
Mailbox metadata: addresses, sizes, message counts	Showing you what a job will cover before it starts, and its progress while it runs	Contract
Audit log: sign-ins, connections, jobs, message reads, downloads	Giving your account a record of who did what; security; fraud prevention	Legitimate interests; contract
Billing records: purchases, quotes, invoices	Taking payment and keeping the accounts the law requires	Contract; legal obligation
Technical data: IP address, browser, request logs	Running and protecting the service	Legitimate interests

The app sets the cookies it needs to keep you signed in. Our website, documentation and app also use Google Analytics, which sets its own cookies to measure how the pages are used; Google's handling of that data is described in its privacy policy. We do not use cookies for advertising.

How long we keep it

• Export files are deleted seven days after they are built.
• Archived mailboxes and their raw messages are kept for six months after their last archive pass, then deleted with a week's notice, or sooner if you delete the mailbox or the account.
• Provider credentials are deleted when you remove the connection, after six months without a run, or when your account is deleted.
• Account data and the audit log are kept for the life of your account and deleted after the grace period that follows an account deletion request.
• Billing records are kept for six years after the transaction, as UK tax law requires.

Who we share it with

We do not sell personal data and we do not share it with anyone for their own marketing. We use a small number of processors to run the service:

• Google LLC and Microsoft Corporation — we read the mailboxes you connect through their APIs, using the read-only access you or your administrator grant. We never send, move or delete anything in the source mailbox.
• Stripe — payments. Stripe handles your card details; we never see them.
• Mailgun (EU region) — transactional email such as sign-in links, invitations and job notices.

Mailgestor Cloud is hosted in the United Kingdom on infrastructure operated by eNetIdeas. Archived content stays in the UK. Where a processor is outside the UK, transfers rest on the UK International Data Transfer Agreement or UK Addendum to the EU Standard Contractual Clauses.

We will disclose data if the law requires it — for example a court order — and will tell you when we are permitted to.

How we protect it

• Access to providers is read-only.
• Credentials are encrypted with AES-GCM under a per-account key and never leave our servers. Microsoft refresh tokens rotate on every use.
• Every archived message is stored once, addressed by its SHA-256 digest, encrypted under your account's key and immutable.
• Export files are encrypted at rest and streamed decrypted only to an authorised download.
• HTML mail is sanitised and rendered in a sandboxed frame with no network access.
• Every meaningful action is recorded in your account's audit log, which you can export.

Your rights

Under the UK GDPR you can ask us for a copy of your personal data, ask us to correct or delete it, restrict or object to how we use it, and ask for it in a portable form. You can delete your account, or a single mailbox, from the app at any time; a short grace period lets you cancel the deletion.

If the data you are asking about is inside a mailbox we archived for a customer, we will refer your request to that customer, who is the controller, and help them answer it.

You can complain to the Information Commissioner's Office at ico.org.uk. We would rather hear from you first.

Changes

If we change this policy in a way that matters, we will email account owners before the change takes effect and update the date at the top.

Contact

eNetIdeas Ltd, 3rd Floor, 86-90 Paul Street, London EC2A 4NE
Company number 07465254 (England and Wales)
privacy@mailgestor.com · enetideas.com