Your Data Stays Yours

Because each TechMail instance is run by its operator, this notice explains what the software stores and does on your behalf - not a promise made by a central company holding your mail. There is no such company in the core mail path.

What Is Stored

• Account details: your email, optional name, and an argon2id password hash.
• Domains and their DNS records; DKIM private keys are encrypted at rest (AES-256-GCM).
• Mailboxes, folders, and messages. Raw MIME is stored on the server's disk.
• Sessions: only a sha-256 hash of each session token is stored.

What Is Not Done

TechMail does not send your mail through any third-party SaaS email provider for core mail flow, and does not include analytics or trackers by default. Your messages are not scanned to build advertising profiles.

Transactional Email

Password-reset and contact emails may be sent through a configured transactional provider (e.g. Resend) so they aren't affected by a new domain's sending reputation. These are operational messages, separate from your everyday mail flow.

Your Control

As the operator, you decide where the server runs, who has accounts, and how long data is retained. You can delete mailboxes, messages and domains at any time, and you hold the encryption key that protects your reversible secrets.

Security

Encryption at rest, hashed passwords and authenticated mail are described in more detail on the security page.