1. Who we are
The controller of your personal data is Inspicio Group LTD, the company that operates HideMy.world. Its registered details are on our legal notice. For anything in this policy, contact privacy@hidemy.world.
2. What we process
- Account data. Your email address, nickname, password hash (never the password itself), plan and settings.
- The content of emails sent to your addresses. This is the point of the service: every message delivered to one of your anything@yournick.hidemy.world addresses (headers, body and attachments) is stored so your rules, transformers and deliveries can run. It is kept for as long as your retention setting says, then deleted.
- Usage metrics. Counts of emails received, rules evaluated, deliveries made; used for quotas, your dashboard and capacity planning.
- Payment data. Payments are handled entirely by Stripe. We receive your plan, billing status and invoices; we never see or store your card number.
- AI rule excerpts. If you create an AI rule, a stripped-down excerpt of each matching email is sent to the configured AI provider to evaluate your rule. Emails that no AI rule applies to are never sent to any AI provider.
- Delivery logs. Records of webhook calls, Telegram messages and forwards (status, timestamps, destination) so you can debug your pipelines and we can debug ours.
3. Lawful bases
- Performance of a contract: receiving, storing, filtering, transforming and delivering your email, managing your account and billing.
- Legitimate interests: securing the service, preventing abuse and spam, and keeping aggregate usage metrics.
- Consent: optional features you switch on yourself, such as AI rules, linking Telegram, or optional analytics cookies.
- Legal obligation: keeping billing records for as long as tax and accounting law requires.
4. How long we keep things
- Emails and attachments: for the retention period set on your account (7 days on Free, up to 90 days on Lite, up to 365 days on Pro), then permanently deleted.
- Over-limit mail: if you exceed your monthly email quota, additional inbound mail is held for 7 days (so you can upgrade and release it), then discarded.
- Account data: while your account exists, then deleted shortly after you close it. Your nickname is retired, not reused; see the terms.
- Delivery logs and metrics: kept for a limited rolling window, then deleted or aggregated beyond recognition.
- Invoices: for the statutory retention period.
5. Processors we use
We share data only with processors needed to run the service, under data processing agreements:
- Hosting: EU-based infrastructure providers that run our servers and storage.
- Stripe: payment processing and invoicing.
- AI provider: only when you use AI rules, and only the stripped-down excerpts described above.
- Telegram: only if you link a Telegram channel, and only the messages you route there.
6. International transfers
Your emails and account data live on EU-based infrastructure. Some processors (such as Stripe, or an AI provider) may process limited data outside the UK and EEA; where they do, transfers are covered by adequacy decisions or standard contractual clauses.
7. Your rights
Under the UK and EU GDPR you can ask us for access to your data, correction, erasure, a portable copy, restriction of processing, or object to processing based on legitimate interests. Email privacy@hidemy.world and we will respond within one month. You can also complain to the UK Information Commissioner's Office or your local EU supervisory authority.
8. What we never do
- We never sell your data. To anyone. Ever.
- We never profile you for advertising, and we show no ads.
- We never read your email except as needed to operate the service or as the law requires.
9. Cookies
We set one strictly functional session cookie so you stay signed in. If analytics is configured, it runs via Google Tag Manager and is used only to understand how the public site is used, never to profile you for advertising.
10. Changes to this policy
If we change this policy in a way that matters, we will tell you by email or in the dashboard before it takes effect. The date at the top always tells you when it last changed.