Privacy Policy

Last Updated: January 29, 2026

This Privacy Policy explains how iHQmail ("we," "us," or "our") collects, uses, and protects information when you use our encrypted email service.

1. Our Privacy Philosophy

We believe in data minimization. We collect only what is absolutely necessary to provide our service. Your email content is encrypted end-to-end, and we have zero access to it.

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

• Email address: For account recovery and essential communications
• Display name: Optional, for personalization
• Payment information: Processed securely by third-party payment providers (we do not store card details)

2.2 Technical Data

We automatically collect limited technical data:

• IP addresses: Temporarily logged for security and abuse prevention, deleted after 90 days
• Device information: Browser type and operating system for compatibility
• Access timestamps: For security monitoring only

2.3 What We Cannot Access

Due to our zero-knowledge architecture, we cannot access:

• Email message content
• Attachment contents
• Your encryption keys
• Decrypted metadata of encrypted emails

3. How We Use Your Information

We use collected information solely to:

• Provide, maintain, and improve our email service
• Process transactions and send billing confirmations
• Protect against abuse, spam, and security threats
• Communicate service updates and security alerts
• Comply with legal obligations

4. Data Sharing

We do not sell your personal information. We share data only in these limited circumstances:

• Service providers: Payment processors and infrastructure partners bound by confidentiality
• Legal compliance: When required by valid legal process (we will notify you unless legally prohibited)
• Business transfers: In the event of a merger or acquisition, with continued privacy protections

5. Data Security

We implement comprehensive security measures:

• Military-grade end-to-end encryption for all email content
• Zero-knowledge architecture — your keys never leave your device
• Encrypted data transmission (TLS 1.3)
• Regular security audits and penetration testing
• Strict access controls for all systems

6. Data Retention

We retain data only as long as necessary:

• Account data: Until account deletion, then removed within 30 days
• Email content: Stored encrypted until you delete it
• IP logs: Deleted after 90 days
• Billing records: Retained as required by law (typically 7 years)

7. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Correction: Update inaccurate information
• Deletion: Delete your account and associated data
• Export: Download your data in a portable format
• Restriction: Limit certain data processing
• Object: Opt out of specific data uses

To exercise these rights, contact privacy@ihqmail.com.

8. International Data Transfers

Your data may be processed in multiple jurisdictions. We ensure appropriate safeguards are in place, including encryption and contractual protections, regardless of location.

9. Cookies and Tracking

We use minimal, essential cookies for:

• Session management (staying logged in)
• Security features (CSRF protection)
• Preference storage (theme, language)

We do not use advertising trackers or third-party analytics cookies.

10. Children's Privacy

iHQmail is not intended for users under 16 years of age. We do not knowingly collect information from children. If we learn that we have collected data from a child, we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or service notification at least 30 days before taking effect. The "Last Updated" date will reflect the most recent revision.

12. Contact Us

For privacy-related inquiries or requests:

• Email: privacy@ihqmail.com
• Security: security@ihqmail.com