Privacy Policy

MailForge ("we", "us") is the provider of the MailForge business email platform. This Privacy Policy explains what personal data we collect when you use our website, apps and email services, how we use it, and the choices you have. It applies to visitors, account holders and workspace members.

We process personal data as a data controller for our own purposes and as a data processor on behalf of the workspace administrator for the content of your business email. We handle data in line with the Nigeria Data Protection Act 2023 and, where applicable, the GDPR.

We collect the following categories of information:

• Account data: your name, workspace or company name, email address, phone number and password (stored only as a cryptographic hash).
• Email content and metadata: messages you send and receive, attachments, and delivery information, processed to provide the service to your workspace.
• Usage and technical data: device and browser information, IP addresses, log data, and product analytics that help us keep the service secure and improve it.
• Billing data: invoices and payment references processed by our payment provider. We do not store your full card details.
• Marketing preferences: your choices about receiving product updates, which you can change at any time.

We use personal data to provide, maintain and secure the Service, to authenticate you, to process payments, to detect fraud and abuse, to communicate service and security notices, and to improve the product. Where we rely on consent (for example for marketing email), you may withdraw it at any time.

We do not sell your personal data. We share it only with service providers who help us run the platform — such as email delivery, hosting, authentication, analytics and payment providers — under contracts that restrict their use of your data to our instructions, and where required by law or to protect our legal rights.

Email content in your workspace is shared with third parties only as directed by your workspace administrator or as needed to deliver your messages.

We apply industry-standard technical and organisational measures to protect your data, including encryption in transit, access controls, audit logging and multi-factor authentication. No system is perfectly secure, so we also maintain incident response procedures and will notify affected users and regulators where required by law.

We keep account data while your account is active and for a reasonable period afterwards for export, dispute and compliance purposes. Email content is retained while your workspace exists and for a short grace period after deletion, after which it is permanently removed from backups.

We use strictly necessary cookies to keep you signed in and keep the service secure, and optional analytics cookies to understand how the product is used. You can control optional cookies through your browser settings; disabling them does not prevent you from using the Service.

Depending on where you live, you may have rights to access, correct, export or delete your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. Workspace administrators may export or delete workspace data from their settings. You can exercise other rights by contacting support@mailforge.com.ng.

Our infrastructure may process data in data centres outside Nigeria. Where your data is transferred internationally, we use appropriate safeguards such as standard contractual clauses and equivalent protections under Nigerian data protection law.

The Service is intended for business use and is not directed at individuals under 18. We do not knowingly collect data from children; if you believe a child has provided us personal data, contact support@mailforge.com.ng and we will delete it.

We may update this Privacy Policy from time to time and will notify you of material changes by email or in-app notice before they take effect. For any privacy question or request, contact support@mailforge.com.ng.