Privacy Policy

1. Who We Are

SwishEmail is operated by:

Swish World Group Inc
271 W. Short St
Lexington, KY 40507
United States
SoS Organization Number: 1425043

Contact: support@swish.email

2. Data We Collect

• Account data: email address, password hash, account settings, recovery email if provided, and account status.
• Email data: emails, attachments, drafts, contacts, folders, mailbox settings, and mailbox contents.
• Email metadata: sender, recipient, timestamps, routing data, message IDs, delivery status, and technical headers.
• Security data: IP addresses, login attempts, session records, device details, and security logs.
• Support data: messages, files, and information you send to support.
• Technical data: browser, device, operating system, app version, error logs, and diagnostic information.
• Public-page analytics: limited analytics on public pages where analytics cookies are accepted.

3. What We Do Not Do

• We do not sell your personal data.
• We do not show advertisements inside your mailbox.
• We do not use email content for advertising profiles.
• We do not use mailbox content for marketing.
• We do not run Google Analytics inside private mailbox areas.

4. How We Use Data

• To create, manage, and secure SwishEmail accounts.
• To send, receive, store, display, sync, and manage email.
• To provide Webmail, mobile app, IMAP, and SMTP functionality.
• To detect spam, malware, phishing, abuse, and suspicious activity.
• To provide account recovery and customer support.
• To maintain service reliability, performance, and security.
• To comply with legal obligations and respond to valid legal process.

5. Legal Bases

Where applicable, we process personal data under the following legal bases:

• Contract: to provide the SwishEmail service you request.
• Legitimate interests: to secure accounts, prevent abuse, maintain reliability, and protect users.
• Consent: for optional analytics cookies on public pages where required.
• Legal obligations: where processing is required by applicable law or valid legal process.

6. Third-Party Services

We use limited third-party providers to operate SwishEmail, including:

• Postmark: transactional email delivery, such as verification and password reset emails.
• Google Analytics: public-page analytics only, where analytics cookies are accepted.
• Infrastructure providers: hosting, storage, security, and network services needed to operate SwishEmail.
• App distribution platforms: app stores and related services where SwishEmail mobile apps are offered.

Google Analytics is not used inside private mailbox areas.

7. Data Storage and Transfers

SwishEmail data may be stored and processed in the United States, the European Union, and other locations where our service providers operate.

Where data is transferred between regions, we use appropriate operational, contractual, and security safeguards where required.

8. Security

We use technical and organisational safeguards to protect SwishEmail accounts and data, including password hashing, access controls, encrypted connections where supported, abuse monitoring, and security logging.

No online service can guarantee perfect security, but we work to protect SwishEmail from unauthorised access, misuse, abuse, and data loss.

9. Data Retention

• Mailbox data is retained while your account is active or until you delete it.
• Deleted emails may be permanently removed according to mailbox and system behaviour.
• Account-related records may be retained for up to 6 months after deletion for security, fraud prevention, legal, dispute, or operational reasons.
• Security logs may be retained for a reasonable period to protect accounts and investigate abuse.
• Support messages may be retained as needed to resolve issues and maintain service records.
• Operational backups, where used, are retained only as long as reasonably necessary for reliability and recovery.

10. Your Rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, portability, or objection to certain processing of your personal data.

You can make a request by contacting: support@swish.email.

11. Account Deletion

You may request deletion of your account by contacting support or by using account deletion tools where available.

Account deletion may permanently remove your mailbox, emails, contacts, settings, and access to SwishEmail. Some limited records may be retained where necessary for security, fraud prevention, legal compliance, dispute resolution, or operational purposes.

12. Children

SwishEmail is not intended for users under 13 years old. If the laws of your country require a higher minimum age, you must meet that higher requirement to use SwishEmail.

13. Cookies and Analytics

We use essential cookies to keep SwishEmail secure and functional. We may also use analytics cookies on public pages to understand site performance, but only where analytics use is allowed.

You can learn more in our Cookie Policy.

14. Legal Requests

We may disclose data where required by valid legal process or applicable law. Where appropriate, we may seek to narrow, reject, or challenge overly broad or unlawful requests.

15. Changes to This Policy

We may update this Privacy Policy from time to time. If we make significant changes, we will take reasonable steps to notify users, such as posting an updated policy, changing the “Last updated” date, or sending notice where appropriate.

16. Contact

For privacy questions or requests, contact: support@swish.email.

This Privacy Policy is provided for general operational and legal clarity and should be reviewed by a qualified legal professional before publication.