Privacy Policy

Last updated: April 2026

1. Who we are

MailCraft AI ("we", "us") is an AI-powered email writing tool operated online. If you have any questions about this policy, you can reach us through our contact page.

2. What information we collect

Account information

When you create an account, we collect your name, email address, and a hashed password. This is the minimum needed to log you in and save your usage limits.

Email content you generate

When you use the generator, your inputs (recipient name, key points, tone, language, etc.) are sent to our AI provider to produce a response. We do not permanently store the content of the emails you generate. Temporary processing may occur for up to 24 hours for reliability purposes, after which it is deleted.

Usage data

We track how many emails you generate per month so we can enforce plan limits fairly. We may also collect anonymous analytics (page views, referrer, browser type) to improve the product.

3. What we do NOT do

• We do not sell your data to anyone, ever.
• We do not train AI models on your email content.
• We do not read your generated emails for marketing purposes.
• We do not share your email address with third parties for advertising.

4. Third-party services we use

To make MailCraft work, we rely on a small number of trusted services:

• AI providers (such as OpenAI or similar) — to actually generate the email content. They process your inputs under their own privacy policies and do not retain the data for training.
• Hosting providers (such as Vercel, Railway) — to run the website and servers.
• Payment processors (when paid plans are active) — to securely handle subscription billing. We never see or store your full card details.

5. How long we keep your data

Account information is kept as long as your account is active. If you delete your account, we remove your personal information within 30 days, except where we are legally required to keep records (for example, tax or invoice records for paid users).

6. Your rights

You have the right to:

• Access the personal information we hold about you.
• Correct anything that is wrong or outdated.
• Delete your account and associated data.
• Export your data in a portable format.
• Opt out of marketing communications at any time.

To exercise any of these rights, just email us through the contact page and we'll act on your request promptly.

7. Security

We use industry-standard security practices: HTTPS encryption for all data in transit, hashed passwords (we never store plain-text passwords), and secure cloud infrastructure. No system is 100% secure, but we take this seriously.

8. Children's privacy

MailCraft is not intended for users under the age of 16. We do not knowingly collect personal information from children. If you believe a child has signed up, please contact us and we'll remove the account.

9. Changes to this policy

If we make meaningful changes to this policy, we'll update the "last updated" date above and notify registered users by email. Continued use of MailCraft after changes means you accept the updated policy.

10. Contact

Questions about this policy, a data request, or anything else? Reach out via our contact page. We read every message and reply within 48 hours.