1. Overview & Our Privacy Pledge
WeBotApp Private Limited ("WeBotApp", "we", "our", or "us") operates WeBotApp Mail (mail.webotapp.com). We are committed to protecting the privacy, confidentiality, and security of your personal data and your business communication.
We never sell, monetize, or rent your personal information, inbox emails, recipient contacts, or business communication to any advertising broker, third-party network, or data aggregator.
2. Information We Collect
When you register and use WeBotApp Mail, we collect the following categories of information:
- Account Information: Name, work email address, password hash (encrypted using bcrypt), and organization details.
- Custom Domain & Routing Metadata: Domain names, DNS record states (MX, SPF, DKIM, DMARC), and Cloudflare configuration identifiers.
- Email Metadata & Content: Sender, recipient, timestamp, subject line, body text/HTML, and attachment metadata necessary to render your webmail inboxes.
- Billing Information: Payment transaction references handled securely through our PCI-DSS compliant payment gateways (Razorpay and Stripe). We never store raw credit/debit card numbers or CVVs on our servers.
3. Cloudflare R2 & Serverless Storage Security
WeBotApp Mail leverages Cloudflare Workers and Cloudflare R2 Object Storage to deliver serverless inbound email processing:
- Raw MIME email files and attachments are stored in ISO/IEC 27001 and SOC 2 Type II certified Cloudflare R2 buckets.
- Data in transit is encrypted using 256-bit Transport Layer Security (TLS 1.3).
- Data at rest in Cloudflare R2 is protected with AES-256 server-side encryption.
4. Amazon SES & Outbound Delivery
Outgoing emails sent through our webmail interface are dispatched using Amazon Simple Email Service (SES). All outgoing emails are cryptographically signed with 2048-bit DKIM keys and verified against your SPF and DMARC DNS policies to guarantee deliverability and prevent email spoofing.
5. Your Data Rights & GDPR / CCPA Compliance
You have full ownership and control over your data. You are entitled to:
- Access & Export: View and export all email messages and mailboxes connected to your domain.
- Rectification & Deletion: Permanently delete individual emails, mailboxes, or your entire domain workspace with all associated data.
- Revocation: Disconnect your Cloudflare tokens and API credentials at any time directly from Account Settings.
6. Contact Our Data Protection Officer
For privacy inquiries, data deletion requests, or compliance questions, contact our legal and security desk: