Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your information.
Encrypted by Default
AES-256 at rest, TLS 1.3 in transit
No Data Selling
Your information is never sold
You Own Your Data
Export or delete anytime
1. Information We Collect
Account Information
When you register for Kosh, we collect your name, email address, and password (securely hashed). If you use a paid plan, we also collect billing information necessary to process payments.
Domain Information
When you add a custom domain, we collect and store the domain name and associated DNS configuration data required to verify ownership and route email.
Email Data
We process and store the email messages you send and receive through the Service, including sender/recipient addresses, subject lines, message content, attachments, and metadata such as timestamps.
Usage Data
We automatically collect information about how you interact with the Service, including IP addresses, browser type, device information, pages visited, and the date and time of your visits.
2. How We Use Your Information
Service Delivery
We use your information to provide, maintain, and improve the Service, process your transactions, send and receive emails on your behalf, and manage your account.
Communication
We may use your email address to send you service-related notices, including maintenance updates, security alerts, and support messages. We do not send marketing emails without your consent.
Security & Protection
We use collected information to detect, prevent, and address technical issues, fraud, and security threats to protect our users and the integrity of the Service.
Analytics & Improvement
We use aggregated, anonymized usage data to analyze trends, understand user behavior, and improve the overall Service experience.
3. Data Sharing & Disclosure
No Selling of Data
We do not sell, rent, or trade your personal information to third parties for marketing or advertising purposes. Your data is not a product.
Service Providers
We may share limited information with trusted third-party service providers who assist us in operating the Service (e.g., payment processors, hosting providers). These providers are contractually bound to protect your data.
Legal Requirements
We may disclose your information if required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
4. Data Security
Encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Passwords are hashed using industry-standard algorithms and are never stored in plain text.
Infrastructure
Our servers are hosted in secure data centers with physical and virtual security measures. We perform regular security audits and vulnerability assessments to maintain the highest standards of protection.
Access Controls
Access to user data is strictly limited to authorized personnel who require it for service operations. All access is logged and monitored.
5. Data Retention
Active Accounts
We retain your personal information for as long as your account is active or as needed to provide you with the Service. Email data is retained in accordance with your account settings and plan.
Account Deletion
If you choose to delete your account, we will remove your personal information and email data from our active systems within 30 days. Some information may be retained in backups for up to 90 days before being permanently deleted.
6. Your Rights
Access & Portability
You have the right to access your personal data and request a copy in a portable format. You can export your emails and account data from the dashboard at any time.
Correction & Deletion
You can update or correct your personal information through your account settings. You may also request the deletion of your account and associated data by contacting our support team.
Consent Withdrawal
Where we rely on consent for data processing, you may withdraw your consent at any time. This will not affect the lawfulness of processing carried out prior to withdrawal.
7. Cookies & Tracking
Essential Cookies
We use essential cookies to maintain your session, remember your authentication state, and ensure the Service functions properly. These cookies are strictly necessary and cannot be disabled.
Analytics
We may use anonymized analytics to understand usage patterns and improve the Service. We do not use third-party advertising trackers or tracking pixels in your emails.
8. Children's Privacy
Age Requirement
Kosh is not intended for use by individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that we have collected such information, we will take steps to delete it promptly.
9. Changes to This Policy
Updates
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on this page and updating the 'Last Updated' date. We encourage you to review this policy periodically.
10. Contact Us
Questions & Concerns
If you have any questions or concerns about this Privacy Policy or our data practices, please contact us through our Contact page or email us at privacy@kosh.email. We take your privacy seriously and will respond promptly.
Privacy Concerns?
If you have questions about your data or want to exercise your privacy rights, we're here to help.
Contact Us