Privacy notice
Privacy at Extended Email.
Effective September 27, 2026. Extended Email, Inc. ("Extended Email," "we," "us," or "our") provides email, privacy-address, AutoFill, subscription, and related security services.
This notice explains the categories of personal information we process, why we process it, the categories of service providers that may receive it, how long it is retained, and how users can exercise applicable privacy rights.
Information we process
Depending on the features you use, Extended Email may process:
- account and identity information, including your registration email, Extended Email addresses, account identifiers, plan, preferences, and security state;
- email information, including sender/recipient fields, subject lines, message content, drafts, attachments, message identifiers, timestamps, delivery state, folders, and read/unread state;
- website/domain association information used by AutoFill and address-management features;
- subscription and transaction information received from the applicable app store or subscription service;
- device and notification information needed to deliver notifications and device-specific features;
- user-linked operational usage information, such as message-count totals, storage usage, foreground app/web session timing, platform type, app version, and selected feature/service or plan-limit interaction records used for limits, capacity, reliability, engagement measurement, and product analytics before aggregation;
- authentication, security, abuse-prevention, fraud-prevention, rate-limit, and service-log information;
- information you voluntarily provide when contacting support, privacy, abuse, security, or legal channels.
Extended Email does not use push-notification behavior to infer whether a user has uninstalled the app.
Extended Email does not receive full payment-card numbers from Apple or Google for App Store or Play Store purchases.
How information is collected
Information is collected when you create or use an Extended Email account, send or receive email, save drafts or attachments, use AutoFill or address-management features, purchase or manage a subscription, enable device or notification features, interact with security controls, or contact Extended Email. Some operational information is generated automatically when the Service processes requests, messages, deliveries, security events, or device activity.
Why we process information
- create and authenticate accounts;
- provide addresses, mailboxes, drafts, attachments, AutoFill, and related features;
- send, receive, route, and display email;
- provide end-to-end encrypted features when they are enabled and available;
- deliver notifications;
- manage subscriptions and entitlements;
- prevent fraud, abuse, compromised credentials, spam, attacks, and unauthorized access;
- troubleshoot and maintain service reliability;
- measure service usage, capacity, and feature adoption for product/operational analytics;
- respond to user requests and support;
- comply with applicable law and valid legal process;
- establish, exercise, or defend legal rights.
Extended Email does not sell personal information and does not use personal information for third-party targeted advertising.
End-to-end encrypted communications
Extended Email is designed to support end-to-end encrypted communications between eligible Extended Email users when that feature is enabled and supported.
When E2EE is enabled and active, supported content is designed to be encrypted on the user's device and stored or transmitted as ciphertext. Operational metadata necessary to provide the feature may remain visible to the Service.
Ordinary internet email is not necessarily end-to-end encrypted and may need to be processed in readable form to receive, scan, route, display, or send it.
Service providers and disclosures
Extended Email uses categories of service providers necessary to operate the Service, including cloud infrastructure and storage providers, authentication/database providers, app-platform providers, subscription-management providers, notification-delivery providers, and security/edge-service providers.
Depending on the service involved, the categories of personal information processed by these providers can include account identifiers, ordinary email content and attachments, routing/delivery metadata, subscription lifecycle information, device/notification information, and network/request information needed to provide or secure the Service.
These providers may process information only as necessary to provide their services to Extended Email and subject to applicable contractual and legal obligations. Extended Email requires service providers that receive user data through the Service to provide protections consistent with applicable law and Extended Email's obligations.
Retention and deletion
- Active account and mailbox information is generally retained while needed to provide the Service.
- Ordinary received and sent messages moved to Trash are restorable for 120 days unless permanently deleted sooner or restored before that deadline.
- Temporary operational and transport records are retained only for limited periods appropriate to their function.
- User-linked foreground session and selected usage-event analytics are retained for up to 400 days and are removed with the user-linked raw account data during account purge; longer-lived business metric snapshots are aggregate rather than user-level session records.
- Subscription, security, fraud-prevention, legal, accounting, tax, and dispute records may be retained as reasonably necessary for those purposes.
- Account deletion closes the account and queues the account for secure purge. Some information may remain where legally required or reasonably necessary for security, fraud prevention, accounting, tax, disputes, or backup integrity.
Information that has already been permanently deleted or expired under an enforced retention schedule cannot be reconstructed simply because a later request is received.
Privacy rights and requests
Depending on applicable law and your location, you may have rights to request access to, correction of, deletion of, or a portable copy of certain personal information.
Submit a privacy request to privacy@extendedemail.com.
You can also stop using optional features such as notifications or AutoFill through the applicable app/device controls. You may delete mailbox content and may request account deletion through the Service. Where processing depends on consent and applicable law gives you a right to withdraw that consent, you may do so without affecting processing that was lawful before withdrawal.
A request does not itself authorize disclosure. Extended Email verifies identity and the scope of the request before providing information. Extended Email may require use of an existing authenticated account or other commercially reasonable verification.
If Extended Email denies a request and applicable law gives you a right to appeal that decision, you may appeal by replying to the denial or emailing privacy@extendedemail.com with the subject Privacy Appeal. We will review the appeal and respond as required by applicable law.
Access or portability applies to information Extended Email actually retains and can lawfully provide. It does not require Extended Email to disclose authentication or security secrets, another person's information, privileged or confidential company information, information held only by a third party and never received by Extended Email, or end-to-end encrypted plaintext that Extended Email does not possess.
Security
Extended Email uses administrative, technical, and organizational safeguards designed to protect information. No internet service can guarantee absolute security. Security reports may be sent to security@extendedemail.com.
Children's privacy
The Service is not directed to children under 13, and Extended Email does not knowingly collect personal information from children under 13 where parental consent is legally required.
Changes
We may update this notice as the Service, applicable law, or our practices change. The effective date above identifies the version in effect.
Contact
Extended Email, Inc.
Virginia, United States
Privacy: privacy@extendedemail.com