SimploMail Inbox Privacy Policy

This Privacy Policy explains how 1048035 B.C. LTD., doing business as SimploMail ("SimploMail", "we", "us", or "our"), collects, uses, stores, discloses, and protects information when you use SimploMail Inbox ("Inbox" or the "Service").

SimploMail is a Canadian company. Our office is located at:

1048035 B.C. LTD.
Doing business as SimploMail
Office 645, 145 1/2 Church Street, Unit 5
Toronto, Ontario, M5B 1Y4
Canada

Inbox is an online service available to customers around the world.

By creating an Inbox account, purchasing an Inbox subscription, or using the Service, you acknowledge that you have read this Privacy Policy.

This Privacy Policy should be read together with the SimploMail Inbox Terms of Service.

1. What Inbox Is

SimploMail Inbox provides email addresses and the email infrastructure needed to send and receive email.

Inbox is designed as an email address and email delivery service. It is not intended to provide permanent email storage, email archiving, or email backup.

Email messages may be temporarily stored on SimploMail infrastructure when necessary to receive, process, route, deliver, or retrieve them.

Once a message has been successfully delivered to its intended recipient or successfully retrieved by the applicable email client or email system, we may remove our active copy.

Because email systems require temporary processing, backups, logs, security systems, and other operational systems, a copy or related information may remain in certain systems for a limited period after the active processing copy has been removed.

2. Information We Collect

The information we collect depends on how you use Inbox.

2.1 Account Information

When you create or maintain an Inbox account, we may collect information such as:

• your name;
• email address;
• account credentials;
• contact information;
• account and subscription information;
• information needed to verify your account;
• information needed to verify control of a domain;
• billing and transaction information; and
• other information that you voluntarily provide to us.

We use this information to create and manage your account, provide the Service, process payments, communicate with you, provide support, prevent abuse, and comply with legal obligations.

2.2 Domain and Email Address Information

If you use your own domain with Inbox, we may collect and process information related to that domain and the email addresses associated with it.

This may include:

• your domain name;
• domain ownership or verification information;
• DNS configuration information;
• email addresses;
• mail routing information;
• authentication and security configuration;
• domain-related technical information; and
• information about the status of your domain or email address.

We process this information to provide and secure the Service and to verify that you are authorized to use the domain and email address.

2.3 Email Messages and Email Metadata

When you send or receive email through Inbox, our systems necessarily process information contained in those messages.

This may include:

• message content;
• sender and recipient addresses;
• subject lines;
• message headers;
• attachments;
• message timestamps;
• delivery information;
• IP addresses associated with connections;
• authentication information;
• bounce and delivery-failure information; and
• other technical information contained in or associated with an email message.

Email messages are processed because processing them is necessary to provide the Service.

We do not sell your email content for advertising purposes.

We do not use your email content to train artificial intelligence models.

We do not use your email content to serve advertising.

2.4 Technical and Security Information

When you access or use Inbox, our systems may automatically collect technical information needed to operate and protect the Service.

Depending on the circumstances, this may include:

• IP addresses;
• login dates and times;
• authentication attempts;
• connection information;
• device or application information;
• browser information;
• operating-system information;
• server logs;
• error information;
• security events;
• delivery and connection information;
• information about unusual account activity; and
• other technical information necessary to operate the Service.

We use this information to operate, maintain, troubleshoot, secure, and improve Inbox.

2.5 Payment Information

If you purchase an Inbox subscription, payment information may be processed by our payment provider or other service providers involved in processing transactions.

We may receive information such as:

• payment status;
• transaction amount;
• currency;
• transaction date;
• subscription information;
• billing information; and
• limited payment-related information provided by the payment processor.

Where a third-party payment provider processes your payment information, that provider's own privacy policy may also apply.

We do not need to receive or store your complete payment card number when the payment is processed by a third-party payment provider.

3. How We Use Information

We may use information we collect for the following purposes:

• to create and manage your account;
• to provide Inbox;
• to provide email addresses associated with your domain;
• to receive, process, route, send, and deliver email;
• to authenticate users and protect accounts;
• to verify domain ownership or authorization;
• to process payments and manage subscriptions;
• to provide customer support;
• to troubleshoot technical problems;
• to maintain and improve the Service;
• to detect and prevent spam, phishing, malware, fraud, abuse, and other prohibited activity;
• to protect the security and reliability of our infrastructure;
• to investigate security incidents;
• to enforce our Terms of Service;
• to comply with applicable laws and legal obligations;
• to respond to valid legal requests;
• to establish, exercise, or defend legal claims; and
• to protect the rights, property, safety, and security of SimploMail, our customers, and other persons.

We do not use email content for advertising purposes or to train artificial intelligence models.

4. Temporary Processing and Storage of Email

Inbox must temporarily process and store email messages in order to provide email delivery.

For example, an incoming message may be temporarily stored while our systems receive it and make it available to your email client.

An outgoing message may be temporarily stored while our systems process and deliver it to the recipient's mail server.

Messages may temporarily exist in:

• mail queues;
• processing systems;
• active storage;
• caches;
• backups;
• logs;
• security systems; and
• other operational systems.

The amount of time a particular message remains in a particular system depends on technical circumstances, including delivery status, system operation, failures, retries, security controls, and other factors.

We do not promise a fixed retention period for individual email messages.

Once a message has been successfully delivered or successfully retrieved by the applicable email client or email system, we may remove our copy from the active systems used to process the message.

If delivery cannot be completed, a message may remain temporarily while delivery is attempted or while the delivery failure is processed.

Inbox is not an email archive or backup service.

5. Privacy of Email Content

We consider the content of your email messages private.

We do not sell email content.

We do not use email content to train artificial intelligence models.

We do not use email content to serve advertising.

However, providing an email service requires automated systems to process messages and related information.

In limited circumstances, authorized personnel or service providers may need to access email content or related information when reasonably necessary to:

• provide technical support;
• troubleshoot a technical problem;
• investigate a security incident;
• investigate spam, abuse, fraud, or malware;
• protect our infrastructure;
• comply with a legal obligation;
• respond to valid legal process;
• enforce our Terms of Service; or
• protect SimploMail, our customers, or another person.

We limit such access to what is reasonably necessary for the applicable purpose.

6. Spam, Abuse, and Security Processing

Email services must process technical information to protect users and the wider email system.

We may use automated systems and, where reasonably necessary, human review to detect and respond to:

• spam;
• phishing;
• malware;
• malicious links or attachments;
• fraud;
• unauthorized access;
• compromised accounts;
• unusual activity;
• abuse;
• attacks against our infrastructure; and
• other security or operational risks.

For these purposes, we may analyze information such as:

• message headers;
• message metadata;
• sender and recipient information;
• sending and connection patterns;
• authentication information;
• delivery failures;
• bounce activity;
• abuse reports;
• malware indicators;
• malicious links;
• domain configuration;
• security events; and
• account activity.

We do not have an obligation to monitor every message or account.

Where reasonably necessary to protect the Service or others, we may block, delay, reject, quarantine, or otherwise restrict messages or account activity.

7. How We Share Information

We do not sell your personal information or email content.

We may disclose information to third parties when reasonably necessary to provide, operate, secure, or support Inbox.

These third parties may include:

Infrastructure and Technology Providers

We may use third-party providers for hosting, computing infrastructure, networking, storage, monitoring, security, DNS, email delivery, and other technical services.

These providers may process information on our behalf as necessary to provide their services.

We remain responsible for the personal information under our control and take reasonable steps to require service providers that process personal information on our behalf to protect it appropriately.

Payment Providers

Payment providers may process payment and billing information when you purchase an Inbox subscription.

Support and Service Providers

We may use third-party providers to help us provide customer support, monitor systems, prevent abuse, maintain infrastructure, or perform other business functions.

Legal and Regulatory Authorities

We may disclose information when we reasonably believe disclosure is necessary to:

• comply with applicable law;
• respond to valid legal process;
• comply with a court order or other lawful request;
• protect the rights, safety, or property of SimploMail, our customers, or others;
• investigate fraud, abuse, or security incidents; or
• enforce our Terms of Service.

Where legally permitted, we may provide notice before disclosing information in response to a legal request.

We may not provide notice where prohibited by law or where doing so could compromise an investigation, security, or another person's rights.

Business Transfers

If SimploMail is involved in a merger, acquisition, financing, reorganization, sale of assets, bankruptcy, or similar transaction, information associated with the Service may be transferred as part of that transaction.

Any such transfer will be subject to applicable privacy laws.

8. International Processing

SimploMail is a Canadian company and Inbox is available to customers around the world.

Your information may therefore be processed in Canada and in other countries where SimploMail or its service providers operate.

Those countries may have privacy laws that differ from the laws in your country.

When information is transferred across national borders, we take reasonable steps appropriate to the circumstances to protect personal information and handle it in accordance with applicable privacy requirements.

Where required by applicable law, we will use appropriate safeguards for international transfers of personal information.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer period is required or permitted by law.

Different types of information may have different retention periods.

Email messages are generally retained only temporarily as necessary to provide the Service.

After a message has been delivered or retrieved, our active processing copy may be removed.

Certain information may remain for longer periods in backups, logs, security systems, billing records, or other operational systems.

We may also retain information when reasonably necessary to:

• comply with legal obligations;
• resolve disputes;
• prevent fraud or abuse;
• investigate security incidents;
• enforce our Terms of Service;
• establish, exercise, or defend legal claims; or
• protect our legal rights.

We use retention and deletion practices appropriate to the purpose for which information was collected and the nature of the information.

When information is no longer reasonably required, we may delete, anonymize, or otherwise dispose of it in accordance with our operational procedures and applicable law.

10. Account Cancellation and Deletion

When you cancel your Inbox subscription or your account is terminated, we may disable the associated email address and remove information according to our normal operational procedures.

Email messages remaining on our active systems may be deleted as part of those procedures.

Some information may remain temporarily in backups, logs, security systems, or other operational systems.

We may retain certain information after account cancellation when reasonably necessary for legal, security, fraud-prevention, dispute-resolution, accounting, or other legitimate purposes.

Because Inbox is not an email backup service, you are responsible for keeping copies of any email that you need before cancelling the Service.

11. Security

We use reasonable technical and organizational measures intended to protect personal information and other information processed through Inbox.

These measures may include access controls, authentication controls, security monitoring, encryption in transit where supported, system security controls, and other measures appropriate to the nature of the information and the risks involved.

Email transmitted through Inbox may be encrypted in transit using TLS when supported by the systems involved.

However, no Internet service, email system, or security measure can guarantee complete security.

You are responsible for protecting your passwords, authentication credentials, devices, email applications, and other systems that you use to access Inbox.

If you believe that your Inbox account has been compromised, you should contact us promptly.

12. Privacy Incidents and Security Breaches

We maintain procedures for responding to privacy and security incidents involving personal information.

If we determine that a security incident involving personal information requires notification under applicable law, we will provide the notifications required by that law.

Depending on the circumstances, notification may be provided to affected individuals, regulators, or other appropriate parties.

We may delay or limit notification where permitted or required by law, including where notification could interfere with a legal investigation or security response.

13. Cookies and Similar Technologies

The Inbox website may use cookies and similar technologies that are necessary for the operation, security, functionality, and performance of the website.

We may also use analytics or similar technologies to understand how visitors use the website and to improve the Service.

The specific cookies and technologies used may change as the website and Service develop.

Where applicable law requires consent for non-essential cookies or similar technologies, we will seek that consent.

14. Your Privacy Rights

Depending on where you live and which privacy laws apply to you, you may have rights regarding your personal information.

These rights may include the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of personal information, subject to legal and operational exceptions;
• request information about how we collect, use, and disclose personal information;
• object to certain uses of personal information;
• request restriction of certain processing;
• withdraw consent where processing is based on consent;
• request a copy of certain personal information in a portable format; and
• make a complaint about our handling of personal information.

These rights are not absolute.

For example, we may need to retain or use certain information to comply with law, protect security, prevent fraud, resolve disputes, or establish, exercise, or defend legal claims.

If you wish to exercise a privacy right, please contact us using the contact information in this Privacy Policy.

We may need to verify your identity before responding to a request.

15. Privacy Rights in Canada

SimploMail is a Canadian company and handles personal information in accordance with applicable Canadian privacy laws.

Where applicable, this includes the Personal Information Protection and Electronic Documents Act ("PIPEDA") and other applicable Canadian privacy legislation.

Canadian privacy principles generally require organizations to identify the purposes for collecting personal information, obtain appropriate consent, limit collection and use, protect personal information with appropriate safeguards, provide access to personal information, and retain information only as long as necessary for identified purposes.

SimploMail has designated a person responsible for privacy matters and privacy requests.

If you have a privacy concern or request, please contact us through the SimploMail contact page and identify your request as a privacy matter.

You may also have the right to make a complaint to the applicable privacy regulator.

16. European Economic Area and United Kingdom

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar privacy legislation, you may have additional rights under applicable data-protection laws.

Depending on the circumstances, these may include rights of access, correction, deletion, restriction of processing, objection, and data portability.

Where required by applicable law, we will identify the legal basis for processing personal information.

Depending on the purpose of processing, the legal basis may include:

• performance of a contract;
• compliance with a legal obligation;
• our legitimate interests, where those interests are not overridden by your rights and interests; or
• your consent, where consent is required.

Our legitimate interests may include operating and securing Inbox, preventing abuse and fraud, protecting our infrastructure, providing customer support, enforcing our Terms of Service, and improving the Service.

Where processing is based on consent, you may withdraw your consent where permitted by law.

Withdrawal of consent does not affect processing that occurred before the withdrawal.

If you believe that our processing of your personal information violates applicable data-protection law, you may also have the right to lodge a complaint with the data-protection authority in your country or region.

Processing on Behalf of Business Customers

Where a customer uses Inbox to process personal information on behalf of another person or organization, the customer remains responsible for determining whether its use of Inbox complies with applicable privacy and data-protection laws.

Where SimploMail processes personal information solely on behalf of a customer and acts as a processor or service provider under applicable law, that processing may also be governed by applicable contractual terms or a separate data processing agreement between SimploMail and the customer.

17. Information Received Through Email

Inbox users may receive email messages from people who are not SimploMail customers.

Those messages may contain personal information belonging to the sender, recipient, or other people.

SimploMail processes such information as necessary to operate the email service.

If you send an email to an Inbox address, your message may be processed by SimploMail even if you do not have a SimploMail account.

If you are not a SimploMail customer and believe that your personal information has been processed through Inbox, you may contact us using the contact information below.

Where personal information is received through email and the individual did not directly provide that information to SimploMail, we may not always be able to provide individualized notice before processing begins. We will handle such information in accordance with applicable law.

18. Information You Provide About Other People

You may send or receive email containing information about other people.

You are responsible for making sure that your use of Inbox and your handling of other people's information complies with applicable law.

SimploMail does not determine whether you have the legal right or appropriate consent to send, receive, or otherwise process another person's information through your account.

If you use Inbox on behalf of a business or organization, you are responsible for making sure that your organization has the necessary legal basis and permissions for information that it processes through Inbox.

19. Children's Privacy

Inbox is not intended for children under 16 years of age.

You must be at least 16 years old to use Inbox.

We do not knowingly provide Inbox accounts to children under 16.

If you believe that a child under 16 has provided personal information to us or created an account, please contact us so that we can investigate and take appropriate action.

20. Third-Party Services

Inbox may depend on third-party services and infrastructure.

Examples may include hosting providers, cloud infrastructure providers, DNS providers, email delivery systems, payment processors, security providers, monitoring services, and other technology providers.

When these providers process information on our behalf, we take reasonable steps appropriate to the circumstances to require them to protect the information and use it only for the services they provide to us.

When you interact directly with a third-party service, that provider may collect and process information under its own privacy policy.

SimploMail is not responsible for the independent privacy practices of third-party services.

21. Links to Other Websites

The Inbox website may contain links to websites or services operated by third parties.

Those websites have their own privacy practices and policies.

We are not responsible for the privacy practices, security, or content of third-party websites.

We recommend reviewing the privacy policy of any third-party website before providing personal information.

22. No Guarantee of Security or Data Preservation

We take reasonable measures to protect information, but we cannot guarantee that information will never be lost, disclosed, altered, accessed without authorization, or otherwise compromised.

Email is inherently dependent on multiple systems operated by different organizations.

We also do not guarantee that any particular email message will remain available for any particular period.

Inbox is not a backup or archival service.

You are responsible for maintaining copies of important information that you need to preserve.

Nothing in this section limits any rights or remedies that cannot legally be excluded or limited.

23. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

Changes may be made to reflect changes to the Service, our data practices, technology, legal requirements, or other circumstances.

When we make changes, we will update the Effective Date at the beginning of this Privacy Policy.

If a change is material and applicable law requires notice, we will provide notice through the Service, by email, or by another appropriate method.

Your continued use of Inbox after the updated Privacy Policy becomes effective means that you acknowledge the updated policy, subject to any rights you may have under applicable law.

Nothing in this section limits any rights you may have under applicable privacy or consumer-protection laws.

24. Contact Us

If you have questions, concerns, privacy requests, or complaints about how SimploMail handles personal information, please contact us through the SimploMail contact page and identify your request as a privacy matter.

You may contact us regarding requests to access, correct, delete, or otherwise exercise applicable privacy rights.

We may ask you to provide information necessary to verify your identity and understand your request.

https://simplomail.com/contact

SimploMail
1048035 B.C. LTD.
Doing business as SimploMail
Office 645, 145 1/2 Church Street, Unit 5
Toronto, Ontario, M5B 1Y4
Canada

Effective Date: September 15, 2026