Privacy Notice

1. Who this notice covers

This notice explains how the Zmail service at zmail.talktoai.org, operated as part of TalkToAI.org, handles personal data when you visit the site, create an account, subscribe, use a mailbox or contact support.

2. Data we handle

• Account identity: your Zmail address, Google account subject identifier, verified email address and display information returned by Google sign-in.
• Mailbox data: messages, attachments, folders, contacts and settings needed to provide email service.
• Subscription data: PayPal subscription identifiers, plan, status, timestamps and payment-event references. PayPal handles your underlying funding details.
• Security and operations: IP-derived security signals, device/browser information, authentication events, rate-limit records, abuse reports and audit logs.
• Support data: information you provide when asking for help.

3. Why we use it

We use data to provide and secure Zmail, verify subscriptions, prevent spam and fraud, recover accounts, support users, comply with law and improve reliability. We do not request Gmail message, Google Drive or Google Contacts access for portal sign-in.

4. Providers and disclosures

We use infrastructure and specialist providers where necessary, including Google for identity, PayPal for subscriptions and Cloudflare Turnstile for human verification. Mail necessarily passes to other mail operators when you send or receive external messages. We may disclose limited data when legally required or to investigate serious abuse and security incidents.

5. Retention

We keep account and mailbox data while service is active and for limited closure, recovery, dispute and security periods afterwards. Payment and audit records may be retained longer where needed for accounting, fraud prevention or legal claims. Backups expire on their own rotation rather than being edited item by item.

6. Your choices and rights

You can update mailbox settings, cancel renewal and request access, correction or deletion where applicable. Some information must be retained for security, legal or transactional reasons. Privacy rights vary by location.

7. Security and encryption

Zmail uses technical and organisational safeguards, but no online service can promise absolute security. The optional ZMath Shield browser tool can protect a selected note or file with independent passphrase and visual-pattern AES-256-GCM layers. Ordinary email is not universally end-to-end encrypted.

8. Contact

For privacy questions, contact admin@zmail.talktoai.org. Do not send passwords, recovery patterns or payment credentials.