Privacy Policy
Last updated: 14 October 2026
This policy describes how Vexen Mail and Vexen Labs handle personal information when you use the hosted Vexen Mail service at webmail.vexenlabs.com.
Who is responsible
Vexen Labs operates the hosted Vexen Mail service. For questions about this policy or a privacy request, contact support@vexenlabs.com. If your mailbox was created or is managed by an organization, that organization may also determine how your account and mailbox are used.
Information we handle
Depending on how you use the service, we handle:
- Account details such as your name, username, email address, recovery email, and account preferences.
- Mail content and related information, including messages, recipients, subject lines, dates, contacts, drafts, and attachments that you send, receive, or store.
- Service and security information needed to operate accounts, authenticate sessions, prevent abuse, and troubleshoot failures.
- Information you provide when contacting support or requesting an account.
How we use information
We use this information to provide mailbox and account features, route and display email, maintain security, respond to support requests, and operate and improve the service. Email must be processed by the service and mail infrastructure to deliver and display it. Vexen Mail is not end-to-end encrypted; authorized service operators with system access may be able to access stored mail.
Google sign-in
If you choose Google sign-in, we receive your verified Google account email and a stable Google account identifier so we can link that sign-in to your Vexen mailbox. The sign-in request asks only for basic identity information; it does not request access to Gmail messages, contacts, or other Google content. Vexen Mail issues a short-lived mail-access token for the linked mailbox. Token hashes and account links are stored to validate and revoke access; the live token is used by the mail service during your signed-in session. You can continue to sign in with your Vexen mailbox password. Google sign-in does not provide end-to-end encryption.
Sharing and service providers
We share information only as needed to operate the service, including with mail delivery and hosting infrastructure providers, and with administrators of an organization that manages your account. We may disclose information when required by law or when reasonably necessary to protect the service, users, or others. We do not sell personal information.
Retention and deletion
Mailbox content is retained while it remains in your account, subject to mailbox actions and service operation. Account and operational records may remain for security, legal, backup, or recovery needs. The current service does not publish a fixed retention schedule for backups or logs. Contact support or your organization administrator for deletion and retention requests.
Your choices and requests
You may update some profile information in account settings and can ask us to access, correct, delete, or explain the handling of your information by emailing support@vexenlabs.com. We may need to verify your identity and coordinate with your organization administrator. Applicable rights and response rules depend on your location and the role of your organization.
International use and children
The hosting region is not identified in the current product interface. Contact support for current hosting-location information before using the service for data subject to location-specific requirements. The hosted service is intended for adults and authorized organizational users; do not create an account for a child without required authorization.
Changes
We may update this policy as the service changes. The date above identifies the latest published version. Material changes will be posted on this page.