MailArrive checks whether email is set up correctly and reaches the inbox. To do that we handle some of your data. This page says exactly what we collect, why, who else touches it, and how to get rid of it. Plain English, no hedging.
MailArrive is operated by Matano Enterprises LLC, a New Jersey limited liability company, trading as Matano IT Solutions. Contact us at privacy@mailarrive.com.
| Data | Detail |
|---|---|
| Account details | Your email address, name, and optionally your company and phone number. If you sign in with Google we receive your Google account identifier and email, never your Google password. Why: To create and secure your account and to contact you about your account. How long: Until you delete your account. |
| Emails you forward for analysis | When you forward or submit a message for a scam, phishing, or deliverability check, we store that message including its headers and body while we analyze it. Why: To produce the report you asked for. How long: The stored message and its raw copy are cleared once the report expires. You can delete any report yourself at any time. |
| Emails forwarded to our public Scam Check address | Anyone can forward a suspicious message to our public scan address without an account. We store that message, its headers and body, and the address it was sent from. The message you forward usually contains someone else's details, because that is the nature of a scam, and we treat it accordingly. Why: To produce the verdict you asked for, to email it back to you, and to limit how many free checks one address can run per day. How long: The message and its raw copy are deleted after 30 days. If you open an account with the same address, the checks you already ran move into that account and are then kept like the rest of your reports, until you delete them or close the account. We may keep the verdict and an anonymised description of the scam pattern for longer, to warn other people about it, with names, addresses and any identifying detail removed first. We do not add you to any mailing list for using it. |
| Domains and addresses you check | Domains, email addresses, IP addresses and links you submit to our tools, plus the results. Why: To run the check, show your history, and power monitoring and alerts. How long: Until you delete them or close your account. |
| Signatures you build | The name, title, company, phone, website, social links and logo you put into Signature Studio, and any logo you upload. Why: To build, render, save and re-install your signature. How long: Until you delete the signature or close your account. |
| Payment details | Your plan and subscription status, plus identifiers from our payment processor. We never see or store your card number. Why: To run your subscription. How long: As long as required for tax and accounting. |
| Product usage | Which pages and features are used, which templates and options are chosen, and where visits came from (campaign tags and referring site). Some of this is our own, stored here. We also run Google Analytics, so Google receives the page you viewed and how you arrived. Report and inbox addresses are redacted before they are sent, so a shared report link never reaches Google. Signature Studio analytics are stored with a random per-visit identifier and are not linked to your account. Why: To understand what works and improve the product. How long: Aggregated over time. |
| Security and delivery logs | Standard server logs including IP address, browser type, and timestamps. Why: To keep the service running, prevent abuse, and enforce rate limits. How long: A short period, then discarded. |
We set one cookie to keep you signed in. It is required for the site to work, it is not used for advertising, and it is not shared with anyone. Google Analytics sets its own cookies to recognize a returning browser; a content blocker or Global Privacy Control stops those, and nothing on the site breaks. Some pages also use your browser's own storage to remember a draft or a random per-visit identifier used for anonymous product analytics; that never leaves your browser except as described above.
We keep this list short on purpose. Each of these is a service we depend on to run MailArrive.
| Service | What it does | Where |
|---|---|---|
| Cloudflare | Hosting, database, storage, and DNS lookups. All service data lives here. | Global |
| Anthropic (Claude) | AI analysis. Content you submit for analysis, and website content we read to detect your brand, is sent here to be processed. Used to generate your result, not to train models. | United States |
| Stripe | Payment processing and subscriptions. Card details go directly to Stripe. | United States |
| Resend | Sending our outbound email, such as alerts and account mail. | United States |
| Two separate things. Optional sign-in with Google, only if you choose it. And Google Analytics on our pages, which tells Google which page you viewed, roughly where in the world you are, and how you arrived. We have turned off the setting that would join that to Google's cross site advertising profiles, and we strip everything but campaign tags out of the address before it is sent, so tokens in a link never reach them. Turn on Global Privacy Control and none of it runs. | United States | |
| Soro | Where we write the articles on our blog. We fetch the posts from them on our own servers and serve you the finished page, so your browser never contacts them and they receive nothing about you. | United States |
| WhatsApp (Meta) | Only if you choose to message us on WhatsApp. Meta operates that service and can see that you contacted us and what you sent. Every other way of reaching us avoids them entirely. | United States |
| Spamhaus, RIPE, ARIN | Reputation and network lookups for domains and IP addresses you ask us to check. | Global |
Depending on where you live you may have additional rights over your data. Ask us and we will honor them rather than argue about which law applies.
MailArrive is a business tool and is not intended for anyone under 16. We do not knowingly collect their data.
We update this page when the product changes, not on a schedule. If a change materially affects how we handle your data, we will say so on this page and, where it matters, by email. The date at the top always reflects the current version.
Questions, requests, or complaints: privacy@mailarrive.com. A real person answers.