Privacy Policy
Last updated: 2 September 2026
ProtectMyMail is built so that we cannot read your mail. This policy explains what we do — and do not — process, why, and the rights you have. ProtectMyMail is operated by Advanced Creative AI Technology - FZCO ("ACAI Technology", the "controller", "we", "us"), a free-zone company registered at IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates (Licence No. 6255).
Your email content and attachments are end-to-end encrypted in your browser. The encryption keys stay with you. We — and your email provider — cannot read your messages. We process only the limited data needed to run the service, protect it, and bill it.
1. What data we process
- Account data: your email address and authentication data, so you can sign in and use the plugin.
- Billing data: subscription status and payment records. Card details are handled by our payment processor, not stored by us.
- Technical & usage data: limited data such as extension version, browser type, error logs and, if you consent, aggregated analytics — used to keep the service secure and to improve it.
- Support data: messages you send us when you ask for help.
2. Your message content — zero access
Message bodies and attachments are encrypted on your device before they leave your browser and can be decrypted only by you and your intended recipient. We do not hold the keys to your content and cannot read, sell, or hand over readable message content, because we do not have it. Where a message is sent to someone without the plugin, we tell you clearly in the product how delivery works, so you can choose.
3. Legal bases (GDPR Article 6)
- Performance of a contract: to provide the service you sign up for (account, encryption, billing, and the optional Scan add-on once it launches).
- Legitimate interests: to keep the service secure, prevent abuse, and fix problems — balanced against your rights.
- Consent: for optional analytics or marketing cookies. You can withdraw consent at any time.
- Legal obligation: where we must keep records (for example, for tax).
4. Cookies
We set only strictly necessary cookies by default. Analytics or marketing cookies are set only with your consent. Details and controls are in our Cookie Policy — you can change your choice at any time.
5. Sharing & processors
We do not sell your personal data. We share limited data only with service providers who help us run ProtectMyMail — such as hosting and payment processing — under contracts that require them to protect it and use it only on our instructions. We may disclose data if required by law, but we cannot disclose message content we cannot decrypt.
6. Retention
We keep personal data only as long as needed for the purpose it was collected, or as required by law, and then delete or anonymise it. When you close your account, we delete account data within a reasonable period, except records we must keep.
7. Your rights
Depending on where you live, you may have the right to access, correct, delete, or export your data, to object to or restrict processing, and to withdraw consent. You can also complain to your local data-protection authority. To exercise a right, contact us using the details below.
8. International transfers
Where data is processed outside your region, we use appropriate safeguards required by law (such as standard contractual clauses) to protect it.
9. Changes to this policy
We may update this policy as the service changes. We will post the new version here with an updated date and, for significant changes, tell you in the product.
10. Contact
For any privacy question or to exercise your rights, email privacy@protectmymail.com or use our contact page.
Postal address: Advanced Creative AI Technology - FZCO, IFZA Business Park, DDP, PO Box 342001, Dubai, United Arab Emirates.