Privacy Policy
Last updated: March 22, 2026
Introduction
MailPorter ("we", "our", or "us") is a service provided by Alpha Internet Limited, which is the data controller responsible for your personal data. This Privacy Policy comprehensively explains how we collect, access, use, store, disclose, and safeguard your information (including Google user data) when you use our email import service. It also outlines your privacy rights under applicable laws, including the General Data Protection Regulation (GDPR).
Information We Collect
The data we collected about you is what you have provided to us or authorized us to access. We may collect, or process on your behalf, the following categories of personal data when you use or interact with our products and services:
| Category | Data Collected | Purpose |
|---|---|---|
| Google User Data |
| To authenticate your account and securely perform the email import into your target Google account. |
| Mail Server Configuration |
| To securely connect to your external mail servers and retrieve emails for the migration process. |
| Usage & Analytics Data |
| To monitor the status of your import jobs, troubleshoot errors, and improve our services. |
Information We Do NOT Collect
- Email content: Emails pass through our servers during the import process but are never stored permanently on our servers.
- Gmail inbox contents: We explicitly request write-only access to your Gmail account. We cannot read your existing emails.
How We Use Your Information
Our policy requires that we limit our use of data to providing or improving user-facing features. We will use your data to provide you with the services you requested. Specifically, we use your information (including Google user data) to:
- Authenticate with Gmail via OAuth
- Connect to your external mail servers securely
- Import your emails into your target Google account
- Send service-related notifications, updates, and support messages
Strictly Prohibited Uses
All other uses of Google user data are strictly prohibited. We do not use Google user data for targeted advertising, selling to data brokers, providing to information resellers, determining credit-worthiness, lending purposes, creating databases, or training AI models. Any form of user advertisements, personalized advertisements, retargeted advertisements, or interest-based advertisements using this data is prohibited.
Sharing and Disclosing Your Information
We will not sell your data to third parties, but we may share it with our trusted partners (such as secure cloud infrastructure providers) who help us provide our services.
We do not transfer or disclose your information to third parties for purposes other than the ones provided.
Google User Data Transfer Restrictions: We explicitly do not transfer Google user data to third-parties for targeted advertising, selling to data brokers, providing to information resellers, determining credit-worthiness, lending purposes, or any advertising purposes.
Data Security
Security procedures are in place to protect the confidentiality of your data. We use encryption to protect your information and employ industry-standard best practices:
- Encryption at Rest: We use AES-256-GCM encryption to protect your mail server credentials and OAuth tokens stored in our database.
- Encryption in Transit: All connections between your browser, our servers, and third-party APIs use HTTPS/TLS encryption.
- Minimal Permissions: We request only the absolute minimum permissions required. For Gmail, this means write-only access (
gmail.insert,gmail.labels).
Data Retention and Deletion
We store your personal information for a period of time that is consistent with our business purposes. We will retain your personal information for the length of time needed to fulfill the purposes outlined in this privacy policy unless a longer retention period is required or permitted by law.
When the data retention period expires for a given type of data, we will delete or destroy it. You may request for your data to be deleted by deleting your account from within the application dashboard, or by contacting our support team.
When your account is deleted, we immediately delete or destroy all associated data including:
- Account profile information
- Encrypted mail server credentials and OAuth tokens
- Sync job configurations, statistics, and system logs
Legal Basis for Processing (GDPR)
For users in the European Economic Area (EEA) and the UK, Alpha Internet Limited processes your personal data under the following legal bases:
- Contractual Necessity: To provide our email import services as agreed in our terms of service.
- Consent: Where you have provided clear consent (e.g., via OAuth for Google data access). You can withdraw this consent at any time.
- Legitimate Interests: To improve our service and ensure security, provided these interests are not overridden by your fundamental data protection rights.
Your Rights
Under the GDPR and other applicable privacy laws, you have the right to:
Access & Portability
Request access to your personal data and export your sync job configurations and data.
Rectification
Request correction of any inaccurate or incomplete data.
Erasure ("Right to be Forgotten")
Request that your data be deleted by contacting us or using in-app account deletion.
Restriction & Objection
Request restriction of, or object to, the processing of your personal data.
Withdraw Consent
Revoke Gmail access at any time through your Google account settings or our application.
Lodge a Complaint
File a complaint with a supervisory authority if you believe our processing violates data protection laws.
Contact Us
If you have questions about this Privacy Policy, your rights, or our data handling practices, please contact the Data Controller (Alpha Internet Limited) at: [email protected].
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our data handling practices or for other operational, legal, or regulatory reasons. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.