Rmail is operated by Rightal Inc. ("Rightal", "we", "us").

Contact for privacy requests: [email protected].

Depending on how you use the product, we may process:

• Account data such as email address, password hash, and organization name
• Domain and mailbox configuration you enter in the app
• Encrypted Resend credentials you provide for your domains
• Email messages, threads, and attachments needed to operate the inbox
• Technical logs such as timestamps, error diagnostics, and security events

We process data to provide the inbox, authenticate users, route inbound mail, send outbound mail you request, secure the service, and communicate about your account.

We use trusted infrastructure providers to run the product:

• Vercel — application hosting
• Google Firebase / Firestore — database and related backend services
• Cloudflare R2 — attachment object storage
• Resend — email delivery; your own Resend account for domain mail, plus platform Resend for transactional product email where configured

Your Resend account is separate from Rmail. Message delivery, domain verification, and Resend account settings are controlled by you in Resend.

Rmail is not affiliated with, endorsed by, or sponsored by Resend.

We keep account, domain, and mailbox data while your organization remains active. Message and attachment data is retained so the inbox can function.

If you ask us to close an account, we will delete or de-identify associated organization data within a reasonable period, except where we must keep limited records for security, abuse prevention, or legal obligations.

You may request access, correction, or deletion by emailing [email protected]. We may need to verify your identity before acting on a request.

We and our subprocessors may process data in the United States and other countries where those services operate. If you use the product from another country, you understand that data may be processed outside your home jurisdiction.