Privacy Policy

Overview

CleanMails is an open source, self-hosted cold email platform. This privacy policy covers the CleanMails website (cleanmails.online) and related services operated by CleanMails.

When you self-host CleanMails, all email data, lead information, campaign content, and credentials stay on your own server. We have no access to your self-hosted instance or its data.

What we collect on this website

• Standard server logs (IP address, browser user agent, pages visited) for security and abuse prevention.
• If you contact us via email at hello@cleanmails.online, we store the content of your message and your email address to respond.
• We do not use cookies for tracking. We do not use third-party analytics.

Self-hosted instances

CleanMails is designed to be self-hosted. When running on your server:

• All data (emails, leads, credentials, analytics) is stored in your PostgreSQL database on your server.
• SMTP and IMAP credentials are encrypted with AES-256-GCM using a key you generate during setup.
• The only outbound connection is an optional version check to our S3 bucket to notify you of updates. This sends no personal data — only your current version number.
• You can disable the version check by removing the update endpoint from your configuration.

Third-party services

The website is hosted on infrastructure that may use CDN and DNS services. The install script downloads release artifacts from Amazon S3. No personal data is shared with third parties.

Data retention

Server logs are retained for up to 30 days. Email correspondence is retained as long as necessary to resolve your inquiry.

Your rights

You may request deletion of any personal data we hold about you by emailing hello@cleanmails.online.

Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.

Contact

For privacy-related questions, contact us at hello@cleanmails.online.