Privacy Policy

1. Introduction

BTC.email is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Bitcoin-native email service. By using BTC.email, you consent to the data practices described in this policy.

2. Information We Collect

Information You Provide

• Email address for account creation and notifications
• Username selection for your @btc.email address
• Authentication credentials (encrypted passwords or OAuth tokens)
• Profile information from connected OAuth providers
• Forwarding settings, whitelist and blocklist entries

Information Collected Automatically

• IP address, browser type, device information
• Pages visited and features used
• Lightning Network payment hashes and amounts
• Invoice creation and settlement timestamps

Information from Third Parties

• Profile information from Google and Microsoft via OAuth
• Payment confirmations from Lightning Network

3. How We Use Your Information

We use collected information to:

• Create and manage your account
• Process username registrations and email delivery
• Process Lightning Network payments
• Improve and optimize the Service
• Detect and prevent fraud and abuse
• Comply with legal obligations

4. Email Handling

We process email content solely to provide the Service. We do not read or analyze email content for advertising purposes, sell access to email content, or use email content for profiling. When you connect Gmail or Microsoft accounts, your email content is processed by those providers under their privacy policies.

5. Lightning Network Payments

Lightning Network payments are pseudonymous. We record payment hashes, amounts, timestamps, and associated actions. Lightning Network channel operations may involve on-chain Bitcoin transactions that are publicly visible on the blockchain.

6. Data Sharing

We share data with third-party service providers who assist in operating our Service. These providers are contractually obligated to protect your data.

We do not:

• Sell your personal information to third parties
• Share email content with advertisers
• Provide data to data brokers
• Use your data for targeted advertising

7. Data Security

We implement security measures including encryption in transit (TLS/HTTPS), encryption at rest for sensitive data, secure password hashing, row-level security in our database, access controls, and regular security assessments. Despite these measures, no system is completely secure.

8. Data Retention

9. Your Rights

You may:

• Access your personal data through your account dashboard
• Request a copy of your data in a portable format
• Update or correct your account information
• Request deletion of your account and data
• Withdraw consent where processing is based on consent

To exercise these rights, contact privacy@btc.email or use the features in your account settings.

10. Cookies

We use essential cookies for session management, authentication, and security features. We do not use advertising cookies, third-party tracking pixels, or cross-site tracking technologies.

11. International Data Transfers

Our Service infrastructure is hosted in the United States. For users in the European Economic Area or other jurisdictions with data transfer restrictions, we rely on standard contractual clauses and your consent to these Terms.

12. Children's Privacy

BTC.email is not intended for users under 18 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact privacy@btc.email.

13. California Privacy Rights

California residents have additional rights under the CCPA including the right to know what personal information is collected, request deletion, and non-discrimination for exercising privacy rights. We do not sell personal information. To exercise these rights, contact privacy@btc.email.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or Service notification at least thirty (30) days before taking effect.

15. Contact

For questions about this Privacy Policy, contact us at privacy@btc.email.