Privacy Policy
🔒 The Short Version: eMailWipe runs entirely on your computer. We never read, store, or transmit your email content. Your Gmail password is never shared with us. We collect only what is strictly necessary to operate the license system and deliver the service.
1. Who We Are
eMailWipe.com is a brand and service operated by VIMA Consulting ("we," "us," or "our"). We provide email cleaning software for individuals and businesses. Our contact email is privacy@emailwipe.com.
2. How eMailWipe Works — Technical Overview
It is essential to understand how eMailWipe operates before reading what data we collect, because our architecture is specifically designed to protect your privacy:
eMailWipe connects directly from your computer to Gmail's servers using the IMAP protocol — the same standard protocol used by Outlook, Apple Mail, and every other email client. This connection does NOT pass through our servers. We are not in the middle.
This means:
- Your email content is processed entirely on your computer
- Email subjects, bodies, sender addresses, and attachments are never transmitted to us
- Your Gmail App Password is stored locally on your device only — never sent to our servers
- The deletion of emails happens directly between your computer and Gmail's servers
- We have no technical capability to read your emails even if we wanted to
3. What Data We Collect
3.1 Purchase Information
When you purchase a license, we collect:
- Email address (used to deliver your license key and send renewal reminders)
- First name (used for personalization in emails)
- Payment method type (PayPal, Wise, or bank transfer — we never see card numbers)
- Transaction reference (from PayPal or Wise — for our records)
- Country (inferred from payment processor data)
- IP address at time of purchase (for fraud prevention)
We do NOT collect your full name, home address, phone number, or any payment card details. PayPal and Wise handle payment processing independently and under their own privacy policies.
3.2 License Validation Data
Each time you open eMailWipe, the app sends a validation request to our server containing:
- Your license key
- A hardware fingerprint (a one-way hash of your device identifiers — cannot be reversed to identify you personally)
- Your operating system type (Windows or Mac)
- The app version number
This is the minimum data required to verify your license is valid and enforce the device limit. No email data is included in this request.
3.3 Storage Monitoring Data (Pro and Business plans)
If you have enabled storage monitoring, the app periodically sends:
- Your Gmail storage usage percentage (e.g. "78% used") — not the content
- Your Google Drive storage percentage (if Drive monitoring is enabled)
- Your license key (to identify which account to notify)
We use this to send you storage alert emails when your inbox approaches capacity. We never receive your emails, contacts, or any Drive file content.
3.4 Security Event Data
When the phishing detector identifies a suspicious email, the app may report:
- The sender's domain name (e.g. "paypa1-fraud.net") — not the full email address
- The threat score (0–100)
- The threat category (e.g. "brand spoofing")
We use this aggregated data to improve our threat detection and publish security reports. Email subjects, body content, and recipient information are never reported.
3.5 Session Statistics
After a cleaning session completes, the app sends a summary to our servers:
- Number of emails deleted, protected, and failed
- Storage freed (in MB)
- Session duration
- Whether trash was purged
- App version and OS type
This is used to generate statistics for our admin dashboard and improve the product. No email content, subjects, or sender information is included.
3.6 Website Analytics
Our website uses standard server access logs which capture:
- IP address
- Pages visited
- Browser type
- Referring website
- Date and time of visit
We do not use Google Analytics, Facebook Pixel, or any third-party advertising trackers on our website.
4. What We Never Collect
✗ Email subject lines
✗ Email body content
✗ Email sender or recipient addresses
✗ Email attachments
✗ Your Gmail or Google password
✗ Your Google App Password
✗ Google Drive file names or content
✗ Google Drive photos or videos
✗ Your contacts or address book
✗ Your calendar events
✗ Any other Google account data beyond what is described in Section 3
5. How We Use Your Data
We use the data we collect exclusively for:
- License delivery: Emailing your license key after purchase
- License validation: Verifying your license is active on each app launch
- Renewal reminders: Notifying you when your annual license is expiring
- Storage alerts: Notifying you when your Gmail storage is getting full
- Customer support: Responding to help requests you initiate
- Fraud prevention: Detecting and preventing abuse of our license system
- Product improvement: Using aggregated, anonymized statistics to improve eMailWipe
We do not use your data for advertising. We do not sell your data. We do not share your data with any third parties except as described below.
6. Data Sharing
We share data only with:
- PayPal: Your payment is processed by PayPal under their privacy policy. We receive only the transaction reference and your email address.
- Wise: Bank transfer payments are processed by Wise under their privacy policy.
- SendGrid / SMTP provider: We use an email delivery service to send license keys and notifications. They receive the destination email address and email content only.
- Our hosting provider (Verpex): Our servers are hosted by Verpex. They provide infrastructure only and do not access your personal data.
We never sell, rent, or trade your personal information to any third party for any purpose.
7. Data Retention
- Purchase records: Kept for 7 years (legal/tax requirement)
- License records: Kept while your license is active, then 2 years after expiry
- Storage monitoring data: Kept for 90 days, then automatically deleted
- Security event logs: Kept for 90 days in aggregated form only
- Email logs: Kept for 30 days
- Server access logs: Kept for 30 days
8. Your Rights (GDPR and CCPA)
If you are in the European Union, UK, California, or any jurisdiction with applicable privacy laws, you have the right to:
- Access: Request a copy of all personal data we hold about you
- Rectification: Request correction of inaccurate data
- Erasure: Request deletion of your personal data ("right to be forgotten")
- Portability: Request your data in a machine-readable format
- Object: Object to processing of your data
- Withdraw consent: Withdraw consent at any time (this does not affect past processing)
To exercise any of these rights, email us at privacy@emailwipe.com. We will respond within 30 days. Requests to delete purchase records may be limited by legal obligations to retain financial records.
9. Cookies
Our website uses only essential cookies:
- Session cookie: Maintains your login state on the checkout page. Expires when you close your browser.
- Affiliate tracking cookie: If you arrived via an affiliate link, we store the affiliate code for 30 days to credit the correct affiliate. This contains only the affiliate coupon code — no personal information.
We do not use advertising cookies, social media tracking pixels, or any non-essential cookies.
10. Security
We protect your data with:
- SSL/TLS encryption on all data transmitted to our servers
- Passwords stored as bcrypt hashes (one-way, cannot be reversed)
- Regular security updates to our server software
- Access controls limiting which staff can access personal data
- No storage of payment card details (handled entirely by PayPal/Wise)
In the event of a data breach affecting your personal information, we will notify you within 72 hours by email.
11. Children's Privacy
eMailWipe is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@emailwipe.com.
12. International Transfers
VIMA Consulting is based in Ecuador. Our servers are located in data centers that may be in different countries. By using eMailWipe, you consent to your data being processed in the countries where our servers operate. We ensure appropriate safeguards are in place for international transfers.
13. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of significant changes by email (to the address associated with your license) and by posting the updated policy on this page with a new "Last updated" date. Your continued use of eMailWipe after changes constitutes acceptance of the updated policy.
14. Contact Us
For privacy-related questions, requests, or concerns:
- Email: privacy@emailwipe.com
- General support: help@emailwipe.com
- Company: VIMA Consulting — eMailWipe.com
- Response time: Within 5 business days for privacy requests
Summary reminder: eMailWipe was built privacy-first. Your emails never leave your computer. We collect only what is necessary to run the license system and deliver the service you paid for. We never sell your data, never read your emails, and never store your passwords.