NodeMail

Privacy Policy

Last updated:

This policy covers the NodeMail website, account service and Mac app. Your NodeMail account manages sign-in and Pro access; it is separate from the mailboxes you add to the app.

NodeMail operator: ApeMotion Technologies, LLC.
Location: Cheyenne, WY, United States

What stays on your Mac

Mail, attachments, search indexes, mailbox settings, proxy settings and browser identities remain on your Mac. Mailbox passwords and OAuth tokens are kept in macOS Keychain. The account service does not receive this content or these credentials. Mail travels between your Mac and your mail provider, through your chosen proxy or directly. Those providers and proxies operate under their own policies.

Account and service data

To provide sign-in, Pro access, device management, support and abuse prevention, we store your contact email, login identities, authentication records, device identifier hashes, device names, App/macOS versions, session times and entitlement status. Google sign-in supplies an account identifier, verified email and, when available, name and avatar URL. It requests OpenID, email and profile access, not Gmail, Drive or contacts. We also process information you send to support.

Service providers and payments

Cloudflare hosts the website and account service. Turnstile processes network/device signals, including an IP address when supplied, to prevent abuse; on the login page it loads only when you open email sign-in. Resend delivers verification and service emails and receives the recipient and message content. Google processes Google sign-in. Stripe handles checkout and payment details; NodeMail receives customer, subscription, invoice, payment and refund records, not full card numbers. Providers may process data in other countries; no single storage country is promised.

Cookies, security and retention

Necessary cookies and browser session storage maintain sign-in, browser binding and verification progress. Acknowledging this policy does not authorize marketing or optional tracking. Security controls use keyed network/identifier hashes and limited operational logs. Scheduled cleanup removes rate-limit details and processed webhook payloads after seven days, expired website sessions and Google/email sign-in transactions after a further seven-day diagnostic window, and aggregate operational metrics after 90 days. Account data stays while needed for the service; minimum security, billing, tax, refund and dispute records may require longer retention. Ask support about the applicable retention and safeguards.

Your choices and deletion

Contact support@nodemail.app to request access, correction, deletion or other rights available under applicable law; identity verification may be needed. Cloud account deletion requires resolving active subscriptions or checkout and removes login, device and entitlement data while pseudonymizing the account; minimum billing/security records can remain. It does not erase any Mac. Remove mailboxes and saved proxies in the app before uninstalling; uninstalling alone leaves Keychain items and ~/Library/Application Support/NodeMail data.

Contact and changes

For privacy questions, processing locations or a request, email support@nodemail.app. You may also complain to a competent privacy authority where applicable. Updated policies appear here with a revised date; legally required notice or separate consent will be requested when applicable, rather than inferred from a preselected checkbox.

support@nodemail.app