Privacy Policy

We process information that you provide directly, information generated when you use the Service, and limited information from third parties necessary to operate Risu Mail.

• Account data

  Your name, email address, workspace name, authentication identifiers, role, and plan details. For paid plans, this may include billing identifiers from our payment processor.

• Service & content data

  Email metadata (from, to, subject, headers), message body content that you send through Risu Mail, templates, assets, and logs required to deliver, track, and debug email traffic.

• Usage & security data

  IP address, device and browser information, timestamps, request logs, event analytics (opens, clicks, bounces, complaints), and security signals used to protect the Service from abuse.

• Provide, maintain, and improve the Service, including sending and tracking email on your behalf.

• Secure the platform, detect abuse, prevent spam and fraud, and enforce our Acceptable Use Policy.

• Customize your experience, such as remembering settings and providing relevant product surfaces.

• Communicate with you about incidents, product updates, and account-related notifications.

• Measure performance, understand usage patterns, and make informed decisions about product development.

• Comply with legal obligations, including recordkeeping and responding to lawful requests.

We do not sell your personal information. We share information only as needed to operate the Service, comply with law, and protect Risu Mail and our users.

• Service providers

  Infrastructure, email delivery, storage, analytics, fraud detection, and payment partners who process data on our behalf under contracts that require appropriate security and confidentiality.

• Customer-directed sharing

  When you integrate Risu Mail with other tools or direct us to send emails to recipients, we share the relevant information as part of providing that functionality.

• Legal and safety

  If we receive a valid legal request or believe it is necessary to prevent harm, protect rights, or investigate abuse, we may disclose information consistent with applicable law.

We retain information for as long as necessary to provide the Service, comply with our legal obligations, resolve disputes, and enforce our agreements. Retention periods depend on the type of data and your workspace configuration.

• Account and billing records are typically retained for periods required by tax, accounting, and regulatory obligations.

• Email content and logs may be retained for shorter operational windows, subject to your workspace settings and plan limits.

• Security, abuse, and audit logs may be kept longer where necessary to protect Risu Mail, our customers, and recipients.

We use technical and organizational measures designed to protect information against unauthorized access, alteration, disclosure, or destruction. Despite these safeguards, no system is perfectly secure.

• Encryption in transit for data sent between you, Risu Mail, and our infrastructure partners.

• Strict access controls, audit logging, and least-privilege practices for internal tools and systems.

• Controls to detect abuse, suspicious patterns, and compromised credentials.

You are responsible for keeping your passwords, API keys, and authentication methods confidential, and for using appropriate security practices in your own systems.

Depending on your location and role, you may have rights to access, correct, export, or delete certain information, or to object to or restrict certain processing.

• You can review and update many account details directly in the Risu Mail dashboard.

• Workspace owners and admins may configure retention, access controls, and integrations.

• For data subject requests or questions about your rights, you can contact us as described below.

If you have questions about this Policy, how we handle data, or would like to exercise your rights, please contact us through the in-app Support desk in your Risu Mail workspace.

For issues that cannot be resolved through the dashboard, you may be able to contact us using the dedicated privacy channel made available in your plan or regional addendum, where applicable.