Mailwave
RUEN Sign in Open the bot
Document

Privacy policy

Edition of 30 Oct 2026. Describes what data the “Mailwave” service (website mailwave.net, Telegram bot @mailwave_robot, Mini App, API) processes and how it is used. This is a translation: if the two versions differ, the Russian one applies.

1. What data we process

  • Telegram ID, username and profile name — for sign-in and the account;
  • information about orders, balance, top-ups, domain purchases, API keys (the keys themselves are stored only as a hash);
  • a security log: time and address of sign-ins, device type, cabinet actions (purchase, password export, key changes);
  • mail arriving at mailboxes the User bought, and those mailboxes' passwords (stored encrypted);
  • service information about messages for statistics: sender domain, time, mailbox (without the message text);
  • messages you write to support.

When paying, the Service does not receive or store bank card or wallet details: payment services process them.

2. Why we process it

  • sign-in, placing orders, delivering mailboxes and domains, reading mail;
  • balance, payments, refunds;
  • statistics for the User (which services sent mail to their mailboxes) and for the storefront (aggregate pool-domain statistics without addresses);
  • support, security and fraud protection, compliance with the law.

3. Message content

Messages are processed automatically: they must be shown to the User and searched for a verification code. Staff do not read messages without need; access is possible to handle a support request, a violation report, or a legal demand.

4. Legal basis

Processing is needed to perform the Terms of service between the User and the Service and rests on the User's consent expressed by starting to use the Service.

5. Who we share data with

Only as far as needed to operate: payment services (processing and confirming payment), domain registrars (registering and renewing a domain the User ordered), Telegram (sign-in and bot notifications). Data is not passed to anyone else except where the law expressly requires it.

6. Storage and protection

Data is stored on a protected server with restricted access for as long as needed to operate the Service and fulfil obligations to the User. Mailbox passwords are encrypted, passwords and API keys are not written to logs, and management panels are protected with a second factor. Messages are kept while the mailbox exists and are deleted with it.

7. User rights

You may request information about your data, its correction or deletion by contacting support (@MailwaveSupport_robot). Deleting data needed to fulfil obligations may make further use of the Service impossible.

8. Cookies

The site uses only technical cookies: the cabinet session, a “signed in” mark (so the site header shows the “Account” button), language, and a flag for opening from Telegram. There are no advertising or analytics trackers.

9. Changes and contacts

The Service may change this Policy; the current edition is always on this page. For data questions — support @MailwaveSupport_robot or the Telegram bot @mailwave_robot.