Privacy Policy
Last updated: [DATE]
This policy explains how 588 Mail handles personal data for the email service at 588.city.
1. Data we collect
- Account data: your 588.city address, display name and settings.
- Authentication data: password hashes and session records.
- Mail data: messages you send and receive, plus metadata such as sender, recipient and timestamps.
- Technical data: IP address, browser type and connection times, used for security and abuse prevention.
- Cookies: strictly necessary items that keep you signed in and protect forms.
2. Why we use it
- To provide and maintain the email service.
- To authenticate you and protect your account.
- To detect spam, fraud and abuse.
- To respond to support requests and meet legal obligations.
3. Legal bases
Where the GDPR applies we rely on contract performance, legitimate interests (security and abuse prevention), legal obligation, and consent where requested.
4. Sharing
We do not sell personal data. Data is shared only with infrastructure providers that host and operate the mail service, and with authorities where legally required.
5. International transfers
Mail infrastructure may operate in the European Union, Singapore and the United States. Transfers outside the EEA rely on appropriate safeguards.
6. Retention
Mail is kept while your account is active and for a limited period afterwards. Technical logs are kept briefly and then deleted or anonymised.
7. Security
We use encryption in transit, access controls and monitoring. Please use a strong, unique password.
8. Your rights
Subject to applicable law you may request access, correction, deletion, restriction, portability, or object to processing, and you may complain to a supervisory authority. Contact support@588.city.
9. Children
The service is not directed to children under 16.
10. Changes
We may update this policy; material changes will be posted here with a new date.
11. Contact
588 Mail · support@588.city