Privacy Policy
Last updated: September 2026
The short version
We never store the original content of the emails you forward. The small amount of data we keep — your email address and report summaries — is deleted automatically: report summaries within 14 days, and free accounts that go unused for 3 months are removed along with their data. Paid accounts stay until you delete them yourself. You can delete everything instantly at any time. MailForensis is owned and operated by Vylo Security LLC.
Related services
TextForensis, a related service for analyzing text-message scams (smishing), follows the same privacy practices described in this policy.
What we store
To provide the service, we store a minimal set of data:
- Your email address, plan, monthly scan quota, and how many scans you've used.
- Report records: the summary, verdict, findings, sender, and subject of emails you scanned — not the email itself.
What we don't store
We do not store raw forwarded emails, email bodies, attachments, or other original content. Forwarded messages are processed in memory and discarded. We have no access to your inbox and never connect to your email account.
How we use data
We use the stored data only to operate the service: to authenticate you, enforce your monthly scan quota, and display your report history. We never sell, rent, or share your personal data. Analysis and network checks are performed by automated systems.
Retention & deletion
- Report records are automatically deleted 14 days after they are created.
- Free accounts that have been inactive for 3 months are automatically removed along with all their data.
- Paid accounts are never removed automatically while subscribed. A cancelled subscription becomes a free account and is then subject to the 3-month inactivity rule.
- You can delete your account and all associated data at any time from the dashboard.
- One-time sign-in tokens are deleted as soon as they are used or expire.
Cookies
We use one session cookie to keep you signed in. It is HTTP-only and used for authentication only — we do not use tracking or advertising cookies.
Third parties
We use enterprise-grade third-party services to host and secure the service, check the safety of the URLs and domains found in scanned emails, and protect the sign-in form against automated abuse. Threat analysis may route email signals through AI models for review; these models do not use your data for training. Malware scanning of attachments is performed in-house and is not sent to third parties. Payment and billing details for paid plans are processed by a third-party payment provider. None of these receive the original email content, and the payment provider handles only your billing details — never your scan data.
Contact
Privacy questions: privacy@mailforensis.com