# Privacy Policy How FlareMail collects, uses, and stores account, mail, billing, and device data across the web app, iOS app, and sendwithflare.com. Last updated: September 16, 2026. HTML: https://sendwithflare.com/privacy/ This policy describes how FlareMail (“FlareMail,” “we,” “us”) handles information when you use the inbox at [app.sendwithflare.com](https://app.sendwithflare.com), the iOS app, the API, and the marketing site at [sendwithflare.com](https://sendwithflare.com). Effective September 16, 2026. ## Who this covers It applies to people who create a FlareMail account, connect a Cloudflare domain, send or receive mail through FlareMail, visit the marketing site, or contact us for support. ## What we collect - **Account.** Email address, password (stored hashed), Google sign-in identifiers if you use Google, session tokens, and team invites or mailbox grants you create. - **Mail.** Messages you send and receive through FlareMail: headers, bodies, attachments, folders, labels, drafts, scheduled sends, and related metadata. Metadata lives in Cloudflare D1. Bodies and attachments live in Cloudflare R2. - **Billing.** Subscription and entitlement status. Card numbers and payment details are processed by [Paddle](https://www.paddle.com); we do not store full payment card numbers. - **Device and app.** The iOS, web, and desktop apps store a session token on the device (iOS or OS keychain, or browser storage). The iOS app does not request notification permission and we do not collect push notification device tokens. - **Optional product features.** Contacts, filter rules, API keys you create, webhooks you configure, and (if you use them) AI summaries or writing help. - **Marketing site.** Pages on sendwithflare.com record browser pageviews (path, referrer, browser, OS, country) and may load Microsoft Clarity. That is separate from mail in your inbox. ## How we use it - Provide the inbox: store, list, search, send, and receive your mail. - Authenticate you, keep sessions working, and honor team mailbox access. - Bill Pro ($10/month for 12 domains, then $1 per extra domain) or Agency ($60/month, unlimited domains) through Paddle when you go past three domains. - Improve the product and the marketing site (pageviews, Clarity on sendwithflare.com). - Respond when you email [hello@sendwithflare.com](mailto:hello@sendwithflare.com). ## AI features If you use in-app AI (summaries, writing polish, similar), relevant message text is sent to OpenAI to produce the result. Memory features may create embeddings with Cloudflare Workers AI and store them in Cloudflare Vectorize. You can avoid this by not using those features. We do not use your mailbox to train a public FlareMail model. ## Processors we rely on - **Cloudflare** — Workers, Pages, D1, R2, Email Routing, Queues, Workers AI, Vectorize, and related logs for hosting the product. - **Paddle** — subscriptions and invoices. - **Resend** — outbound mail to recipients outside a Cloudflare-provisioned domain. - **OpenAI** — optional AI features you invoke. - **Google** — only if you sign in with Google. - **Microsoft Clarity** — usage analytics on the marketing site. ## What we do not do - We do not sell your personal information. - We do not show ads in the inbox. - We do not scan your mail to profile you for advertising. - Inbound tracking pixels and remote images are blocked by default; see [Privacy & tracking protection](/help/privacy-and-tracking/). ## Cookies and local storage The hosted app authenticates with a bearer session token, not a cookie. The browser stores that token locally. The marketing site may set Clarity cookies. Cloudflare may set cookies required to run Pages and related services. ## Retention We keep account and mail data while your account is active. Deleting your account removes the account and its users, stored mail, attachments, contacts, API keys, and AI memory, and cancels any subscription, except records we must keep for billing, abuse, or legal reasons (for example Paddle invoices or security logs). ## Your choices - You can export or download messages and attachments you have access to in the app. - You can revoke Google access from your Google account. - You can delete your account and its data from inside the app, or by emailing us. - You can email [hello@sendwithflare.com](mailto:hello@sendwithflare.com) to access, correct, or delete personal data we hold. ## Children FlareMail is not directed at children under 13, and we do not knowingly collect personal information from them. ## International processing The product runs on Cloudflare’s network. Your information may be processed in the United States and other locations where Cloudflare or the processors above operate. ## Changes We will update this page when the policy changes. The date at the top is the current version. Continued use after a change means the new policy applies. ## Contact Questions about privacy: [hello@sendwithflare.com](mailto:hello@sendwithflare.com). Support: [sendwithflare.com/support](/support/). Terms: [sendwithflare.com/terms](/terms/).