Privacy Policy

1. Information we collect

We collect account and business details such as name, organization, email, address, country, postal code and phone number; domain and mailbox configuration; plan, order and transaction records; login, security and diagnostic information; and communications you send to support. Stripe handles payment-card details and returns payment status and transaction identifiers to us.

If you choose to connect a Google account, Google provides your authorized account identity and Gmail data needed to display your mailbox, including message and thread identifiers, labels, headers, message bodies, and attachments. We also receive OAuth access and refresh tokens that allow the connection to continue without asking you to sign in for every request.

2. How we use information

We use information to create and secure accounts, provision provider customer records, process orders and renewals, provide domains and email, deliver support, prevent fraud and abuse, keep accounting and audit records, comply with law, and improve reliability. We do not sell personal information.

3. Who receives information

Necessary information may be shared with ResellerClub, domain registries, Stripe, infrastructure and security suppliers, professional advisers, and authorities where legally required. Each receives only information needed for its role and may process it under its own terms and privacy policy. Provider processing may occur in other countries.

Review the ResellerClub legal agreements.

4. Cookies and security

Essential cookies and similar storage keep you signed in, preserve security state and operate the dashboard. We use administrative, technical and organizational safeguards, but no online system can promise absolute security. Keep credentials private and report suspicious access promptly.

5. Google and Gmail data

AOTOZ Mail requests Gmail permission only after you choose to connect Google. The Google permission can modify mailbox labels; AOTOZ uses it solely to provide the visible mailbox features you request: identifying the connected account; retrieving, displaying, searching, and previewing email and attachments; and removing the UNREAD label when you open a message. AOTOZ does not use this permission to send, edit content, move, or delete Gmail messages.

To provide fast search across a large mailbox, AOTOZ stores a metadata-only search index in your browser's IndexedDB storage. This index can include message identifiers, sender and recipient fields, subject, date, labels, unread status, and a short Gmail-provided snippet. Full message bodies and attachments are processed transiently when opened and are not stored in the local search index or persisted in our server database. You can remove the device index at any time using Clear local mail data. OAuth tokens are encrypted at rest on our server and retained only while the connection remains active.

We do not sell Google user data, use it for advertising, use it to determine creditworthiness, or use it to train generalized artificial-intelligence or machine-learning models. We do not allow employees or contractors to read Gmail content except with your affirmative permission for specific support, when necessary to investigate security or abuse, or when required by law. We do not transfer Google user data to third parties except as necessary to provide the user-facing connection with your consent, for security, or to comply with law.

AOTOZ Mail's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. Retention and deletion

We retain account data while your account is active and afterwards only as needed for service restoration, disputes, fraud prevention, tax, accounting, contractual and legal obligations. Provider and payment records may follow separate legally required retention periods.

You may disconnect Google within AOTOZ Mail or revoke access through your Google Account. Disconnecting removes the stored Google OAuth tokens and stops future Gmail access. You may also request deletion of your AOTOZ account and eligible associated data by contacting us. We may verify your identity first and will complete eligible requests within the period required by applicable law.

7. Your choices and rights

You may request access, correction or deletion of eligible personal information, object to or restrict certain processing, or ask for available portability by contacting us. Some records cannot be deleted immediately where retention is required by law, necessary to complete a contract, or needed to protect legal claims.

8. Children and changes

The service is for adults and businesses and is not directed to children. We may update this policy as the product, providers or law change. If we materially change how connected Google data is used, we will provide notice and request consent where required before using it for the new purpose. The effective date above shows the latest version.

Questions and notices

For support, privacy requests, billing questions, or legal notices, contact admin@aotoz.com. Include your account email and order reference, but never send a password or complete payment-card number.