Privacy Policy

Last updated: September 3, 2026 · Controller: DestinoLivre Tecnologia Ltda · São Paulo, Brazil

This policy explains what data WeMails ("we", "us") collects, why, how we protect it, and the rights you have. We built the product so that your mailbox credentials and message content are encrypted and never used for anything other than performing the migration or backup you requested.

In one line: we don't read, mine or sell your email. Mailbox passwords are stored encrypted (AES-256-GCM) and discarded when the job finishes. Backups are encrypted with a key derived from a passphrase only you know.

1. Controller

DestinoLivre Tecnologia Ltda · São Paulo, Brazil is the data controller. For any privacy request, contact contact@wemails.com.

2. Data we collect

2.1 Account data

Your name and email, and a password stored only as a one-way hash — we can never read it.
Optional two-factor (TOTP) secret, stored encrypted.
Plan, subscription status and usage counters.

2.2 Mailbox credentials (password)

To connect by password we need the server, port, username and password you provide. The password is encrypted with AES-256-GCM, kept only in the isolated database of that job, and wiped as soon as the job completes. We use it solely to log in via IMAP/POP3 for the job you started.

2.3 Google & Microsoft authentication (OAuth)

When you connect a Gmail (Google) or Microsoft 365 account via OAuth, we do not receive your password. We receive an authorization (refresh) token, stored encrypted, used only to access that mailbox via IMAP to perform the migration/backup/restore you requested.
WeMails's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements: we do not transfer or sell this data, do not use it for advertising, and do not allow humans to read it except as strictly necessary for support you request, for security/abuse prevention, or as required by law.
You can revoke access at any time in your Google/Microsoft account.

2.4 Message content

During a migration, messages pass through our server in transit and are written to your destination account; we keep no copies afterwards. The only retained content is inside backups you create, where each message is encrypted with a key derived (PBKDF2) from your backup passphrase. We never index, read, profile or use your content for advertising or model training.

2.5 Metadata, security & payment data

Job settings (hosts, usernames, folder names, counts, sizes, status, timestamps); technical/security data (IP, User-Agent, session IDs, audit log); and, for payments, a Stripe customer/subscription reference — we never store full card details.

2.6 Cookies

Strictly-necessary session cookies (HttpOnly, Secure, SameSite) and a language cookie. No third-party advertising or tracking cookies.

3. How we use data

To provide the service you asked for; authenticate you and prevent abuse; process payments; send transactional email via our own mail infrastructure; and comply with the law. We do not sell your personal data or use it for advertising.

4. How we protect data

In transit: TLS for the web app and every IMAP/POP3 connection.
Login passwords: irreversibly hashed. Mailbox passwords: AES-256-GCM, discarded when the job ends. OAuth tokens: stored encrypted.
Backups: each message encrypted with a key derived from your passphrase (PBKDF2-SHA256).
Isolation & scoping: every query is scoped to your account; anti-SSRF checks, session binding, CSRF protection, login lockout, optional 2FA and audit logging.

5. Retention

Mailbox passwords and OAuth tokens are removed when the job completes or you disconnect; backups follow the retention you set and are deleted with the backup or your account; account/billing records are kept while active and as required by law; audit logs are retained briefly for security.

6. Sharing & sub-processors

We share the minimum necessary with Stripe (payments) and our infrastructure providers. Transactional email is sent from our own mail infrastructure. We do not share your data with anyone else except when required by law.

7. Your rights

Under the LGPD (Brazil), the GDPR (EU) and similar laws you can request to access, correct, export or delete your data, and withdraw consent. Deleting your account removes your data (including backups). Contact contact@wemails.com.

8. International, changes & contact

WeMails is a global service; data may be processed in different regions under the protections described here. We may update this policy (we'll change the date and notify you of material changes). Contact: contact@wemails.com · DestinoLivre Tecnologia Ltda · São Paulo, Brazil.