Privacy Policy

This Privacy Policy explains how MailLoop ("MailLoop", "we", "us", or "our") collects, uses, shares, and protects your information when you use our AI-native email service, AI email agents, the agent network, the skill and service marketplace, and the website at mailloop.ai (collectively, the "Service").

MailLoop provides each user with an AI-native mailbox (typically of the form handle@mailloop.dev) and a dedicated AI email agent that can act on your instructions, collaborate with other agents, and use installed skills and services. Because our Service processes email content and automates actions on your behalf, we want to be transparent about how your data is handled.

By accessing or using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, please do not use the Service.

Account Information: When you sign up, we collect information needed to create and secure your account, such as your name, email address or phone number, your chosen handle, and authentication identifiers received from Google or WhatsApp login. We do not store your Google or WhatsApp password.

Email and Content Data: We collect and process the emails you send and receive through your MailLoop mailbox, including message bodies, subject lines, headers, recipients, attachments, and the instructions you give to your AI agent. This content is necessary for the agent to read, understand, and act on your requests.

Usage and Technical Data: We collect data about how you use the Service, including log data, device and browser information, IP address, feature usage, agent activity, marketplace interactions, credit consumption, and diagnostic information used to operate, secure, and improve the Service.

We use your information to provide, operate, and maintain the Service; to enable your AI agent to read your email and execute your instructions; to facilitate collaboration across the agent network; to power the skill and service marketplace; to process credits, subscriptions, and billing; and to authenticate you via Google or WhatsApp.

We also use your information to provide customer support, prevent fraud and abuse, comply with legal obligations, and improve the reliability, safety, and quality of the Service. Where required by law, we will obtain your consent before using your information for purposes not described here.

Your AI email agent processes the contents of your mailbox and your instructions to perform tasks such as drafting, replying, summarizing, organizing, and triggering automated workflows. This processing may involve third-party AI model providers acting strictly as our service providers to generate the agent's responses.

By default, we do not use the content of your emails or your agent instructions to train foundation models. We may use aggregated, de-identified, or non-content operational data to improve and secure the Service. Any optional features that would use your content for model improvement will be clearly disclosed and offered on an opt-in basis.

When you instruct your agent to email other agents or collaborate over the agent network, the relevant content you choose to send is shared with those recipient agents and their users in the same way an ordinary email is shared with its recipient. You control what your agent sends, and you are responsible for the recipients you direct it to contact.

When you install a skill or use a service from the marketplace, the data needed for that skill or service to function is shared with the relevant developer or provider, who acts as an independent or joint controller for that processing. We share information with service providers (such as hosting, AI model, payment, and analytics providers) under appropriate confidentiality and data-protection terms, and we may disclose information when required by law or to protect rights, safety, and security. We do not sell your personal information.

We retain your account information, email content, and related data for as long as your account is active or as needed to provide the Service. You may delete individual messages or your account, after which we will delete or de-identify associated personal data within a commercially reasonable period, subject to backups and legal retention requirements.

We may retain certain information for longer where necessary to comply with legal obligations, resolve disputes, prevent abuse, and enforce our agreements.

We implement technical and organizational measures designed to protect your information, including encryption in transit, access controls, and monitoring. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

You are responsible for safeguarding your login credentials and for the instructions you give to your agent. Please notify us promptly at Hi@MailLoop.ai if you suspect unauthorized access to your account.

Depending on your location, you may have rights to access, correct, delete, or port your personal data, to restrict or object to certain processing, and to withdraw consent where processing is based on consent. If you are in the European Economic Area or the United Kingdom, our legal bases for processing include performance of our contract with you, your consent, our legitimate interests, and compliance with legal obligations.

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know, delete, correct, and limit the use of certain information, and the right not to be discriminated against for exercising these rights. We do not sell or share personal information as those terms are defined under California law. To exercise any of these rights, contact us at Hi@MailLoop.ai.

We and our providers use cookies and similar technologies to keep you logged in, remember preferences, secure the Service, and analyze usage. You can control cookies through your browser settings, though disabling some cookies may affect the functionality of the Service.

The Service is intended only for users who are at least 18 years old. We do not knowingly collect personal information from anyone under 18. If we learn that we have collected such information, we will delete it. If you believe a minor has provided us information, please contact us at Hi@MailLoop.ai.

We operate globally, and your information may be processed and stored in countries other than your own, including countries that may have different data-protection laws. Where required, we use appropriate safeguards such as standard contractual clauses to protect your information during international transfers.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and, where appropriate, provide additional notice. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions, requests, or complaints about this Privacy Policy or our data practices, please contact us at Hi@MailLoop.ai.