1. Our responsibility
BVRAI, Inc., a Canadian company, owns and operates RaiMail and is responsible for personal information handled through the service. This policy covers the RaiMail website and hosted mailboxes. Other BVRAI products may have additional privacy notices for their own features. Our Terms of Service describe the conditions of using RaiMail.
Contact support@bvrai.ca with privacy questions, requests, or complaints, addressed to the person responsible for privacy at BVRAI.
2. Information we handle
- Account information: your name, sign-in and recovery email, shared BVRAI user identifier, sign-in provider, verification status, RaiMail addresses, and account status.
- Mailbox content: messages and headers, senders and recipients, attachments, drafts, folders, conversation information, and read or starred status.
- Your choices: contacts, signatures, filters, blocked senders, vacation responses, scheduled sends, and preferences.
- Operational information: storage and sending usage, delivery and error records, timestamps, IP addresses and device or connection details where recorded by our services and infrastructure.
- Support information: information you provide when asking for help or reporting abuse.
People who email you also provide personal information in their messages. Google sign-in provides identity information for signing in; it does not connect your Gmail inbox to RaiMail. Firebase Authentication manages sign-in credentials; mailbox connector credentials are handled by our servers rather than provided to the website or desktop client.
3. How information is used
We use this information to create and recover accounts; receive, store, search, synchronize, and send mail; provide the settings and integrations you use; enforce service limits; prevent spam, malware, fraud, and unauthorized access; investigate failures and support requests; and meet applicable legal obligations. Message processing includes automated indexing, filtering, and delivery handling needed for an email service.
A free mailbox and an Auto Max subscription use the same account identity. Subscription status may be checked to provision a subscriber's mailbox; a paid subscription is not required for standalone RaiMail. Mailbox cancellation and shared account deletion are separate requests.
Core RaiMail email processing does not submit message content to an AI model. If you choose an Auto Max automation or AI feature that uses mail, that feature's processing and provider disclosures also apply. Future assistant features will need their own information and choices.
4. When information is shared
- To deliver mail: messages, attachments, addressing, and delivery information pass to the recipients and mail providers involved in sending or receiving your email.
- To operate the service: infrastructure and service providers process information on our behalf. These include Google Firebase for identity and application data, Vercel for website hosting and request handling, and the hosting, storage, and network providers used to run the mail service. Stalwart is the mail-server software we operate.
- For features you use: authorized clients and connected BVRAI products access the information needed to perform their requested functions.
- For legal and security reasons: information may be disclosed where required or permitted by applicable law, including to respond to valid legal process, investigate abuse, or protect users and the service.
Recipients may retain, copy, or forward delivered messages. Deleting a message from RaiMail does not remove copies held by recipients or their providers. We do not sell mailbox content or use it for targeted advertising in RaiMail.
5. Location and security
BVRAI is based in Canada. That does not mean all information is stored or processed exclusively in Canada. Infrastructure providers and mail recipients may process information in other countries, including the United States, where different laws and lawful-access requirements may apply.
We use access controls, authenticated connections, and other safeguards appropriate to operating hosted email. RaiMail is not an end-to-end encrypted mail service. Server-side processing and authorized operational access may be necessary for delivery, security, maintenance, and support. No online service can guarantee absolute security. Keep your credentials private and contact us about suspected compromise.
6. Browser storage and external content
RaiMail and its authentication provider use browser storage to maintain sign-in and preferences such as your theme. Blocking or clearing that storage can sign you out or reset preferences. The current RaiMail website does not include advertising trackers.
Remote images in messages are hidden by default. If you choose to show them or follow an external link, the external server may receive your IP address, connection details, and information embedded in the image or link, which can reveal that you opened a message. The external provider's own privacy practices apply.
7. Retention and deletion
Mailbox information is retained to provide the service while your account is active, subject to your deletion choices and service limits. Moving mail to Trash does not permanently delete it. Permanent deletion removes it from the accessible mailbox, but storage reclamation and removal from existing backups are separate processes and are not necessarily immediate.
We retain operational and security records as needed for their purposes, including handling abuse, legal obligations, disputes, and recovery. Limited address reservations and sent/deleted draft identifiers may remain to prevent address reassignment or duplicate operations; those records are separate from message content. Information subject to a legal preservation requirement may be retained longer. Contact us about account closure, deletion, or retention for your circumstances.
8. Your choices and requests
You can manage mailbox content and available preferences within RaiMail. You may also request access to or correction of personal information, ask about its use or disclosure, request deletion, or withdraw consent where applicable by contacting us. We may need to verify your identity before acting. Some requests are subject to legal exceptions, and withdrawing information needed to operate the mailbox may prevent us from continuing the service.
Identify whether a request concerns RaiMail or your shared BVRAI account. Please send only the information necessary for the request and never include passwords or authentication codes. You may raise a privacy complaint with us or the appropriate privacy regulator, including the Office of the Privacy Commissioner of Canada.
9. Eligibility and policy changes
RaiMail is intended for users who meet the age and contractual eligibility requirements in our Terms. Contact us if you believe a child who does not meet those requirements has provided information.
We may update this policy as the service changes. The date above shows the current version. Material changes will be communicated through the service or an appropriate account contact, and we will seek additional consent where required. A policy update does not by itself authorize an unrelated new use of your personal information.