Privacy Policy

This Privacy Policy explains what information ForwardMailTo ("we", "our", "us") collects when you use forwardmail.to and our email-forwarding service, how we use it, who we share it with, and the choices you have. We keep it plain so you know exactly what happens with your data.

Information we collect

• Account information. Your name and email address, and a securely hashed password. If you sign in with a third-party provider, we receive your email and basic profile details from them.
• Domains and aliases. The domains you add, the aliases you create, and each alias's destination (a forwarding email address or, on Pro, an HTTPS webhook URL).
• Email forwarding metadata. For each message we forward, we store a log entry containing the sender, the recipient alias, the subject, a message identifier, a timestamp, and the delivery status. We do not permanently store the body or attachments of your forwarded email — message content is processed in transit only to deliver it.
• Technical credentials. DKIM verification tokens for your domains, and — where you use them — SMTP "reply-as" credentials and per-account webhook signing secrets. Secret values are encrypted at rest.
• Billing information. If you subscribe to a paid plan, payments are processed by Stripe. We never see or store your full card number. We retain billing records such as customer and subscription references and invoices.
• Usage and diagnostics. Standard server logs and error diagnostics used to operate and secure the Service.

How we use your information

• To provide email forwarding and the "reply-as your domain" feature.
• To show you delivery logs and analytics for your own domains.
• To process payments and manage your subscription.
• To respond to support requests and send service and account emails.
• To protect the Service — detecting abuse, preventing spam and open-relay use, and enforcing rate limits.

Email content and retention

We forward your email; we do not read it or keep copies of message bodies. The log metadata described above is kept so you can see your forwarding activity, and is automatically deleted after your plan's retention window — 7 days on the Free plan and 30 days on Pro. Account, domain, and alias data is kept until you delete it. Billing records may be retained longer where required for tax and accounting law.

Who we share data with

We do not sell your data. We share information only with the service providers we need to run ForwardMailTo, and only as necessary:

• Amazon Web Services (AWS SES/SNS/S3) — receiving, sending, and forwarding your email.
• Stripe — payment processing for paid plans.
• Sentry — error monitoring to keep the Service reliable.

We may also disclose information if required by law, or to protect the rights, safety, and security of ForwardMailTo and its users.

Where your data is processed

ForwardMailTo and our email infrastructure operate primarily in the United States. By using the Service you understand your information may be processed there.

Security

We encrypt data in transit over the public Internet and encrypt sensitive stored secrets (such as SMTP passwords and webhook signing secrets) at rest. No system is perfectly secure, but we take reasonable technical and organizational measures to protect your information.

Your rights and choices

• Access and export. Your domains, aliases, and logs are visible in the app, and you can export your email logs to CSV from any domain's Email Logs page.
• Correction. You can update your name, email, and account details from your profile settings.
• Deletion. You can delete your account at any time from your profile settings. This permanently erases your account, domains, aliases, and forwarding logs and cancels any active subscription. Billing records may be retained where required by law.

Cookies

We use a small number of essential cookies to keep you signed in and to secure form submissions. We do not use advertising cookies.

Changes to this policy

We may update this Privacy Policy from time to time. When we make a significant change, we will refresh the date shown at the top of this page.

Contact

Questions about this policy or your data? Email us at [email protected].