Privacy Policy

1. What we collect

• Your account. The real email address you sign up with and a password you choose. We store only a one-way hash of the password, so we cannot read it.
• Account emails. We email your real address a one-time code when you enter it in the extension to create an account or reset your password, and a short notice if someone tries to register an address that already has an account. We send these only because someone asked in the extension, never in bulk, and we send no marketing email. Codes can be requested only a limited number of times per hour.
• What you create with Preevit. The generated email addresses, the datasets (generated profile details and passwords) that go with them, and the website each was created for, so you can find them in your dashboard. Generated passwords are encrypted before they are stored.
• Emails received at your generated addresses. Stored so you can read verification codes, confirmations and other messages. On Pro, attachments are stored too; the Free plan doesn't include attachments.
• Field descriptions you choose to send (optional). After a fill, some required boxes may be left for you to answer, for example a referral code. If you press Help Preevit learn and then Send, we receive what the page itself says about those boxes: the label, placeholder, field name and id, type, whether it is required, a dropdown’s option labels and the page’s language, so Preevit can recognize such fields next time. You see exactly what will be sent before you send it. We never receive what you typed, and the descriptions are stored on their own, with nothing that links them to your account or email. The page’s address is included only if you tick the box for it, and then without anything after a ? or #. Nothing is sent unless you press Send.
• Technical data. Request information such as IP addresses and timestamps, kept for a limited period to operate, secure and troubleshoot the service. Our logs deliberately leave out message contents.

The extension recognizes signup forms on your own device. We do not receive your browsing history. It contacts our servers only when you sign in, click the Preevit button on a form, or check your inbox, and when you click the button it tells us the website address of that form so it can appear in your dashboard. The one other time is when you press Send in Help Preevit learn, described above.

2. How we use it

• Provide and operate the service: generate addresses and datasets, fill forms, and deliver and display your emails.
• Send sign-in, verification, security and account-related emails.
• Process purchases, receipts and refunds.
• Give you support and answer your requests.
• Detect abuse, protect the service and keep it secure. This includes treating variants of one mailbox (for example name+tag@gmail.com and name@gmail.com) as the same email address, declining sign-ups from temporary-inbox services, and remembering how much of the Free allowance a deleted account used (see “How long we keep it”).
• Diagnose problems and improve reliability.
• Improve how well Preevit recognizes signup fields, using only the descriptions you choose to send. A person reads them and, where useful, adds the wording to Preevit’s dictionaries; they are never used to profile anyone.

Our legal bases under the GDPR are providing the service you asked for (contract), keeping it secure and preventing abuse (legitimate interests), meeting legal obligations, and your consent where we ask for it. We do not sell your personal information or access to your emails, and we do not use email contents to build profiles about you.

3. Mail we receive for you

When an email is sent to one of your generated addresses, we store the message so you can read it in the extension. We process it automatically to make it safe to open: scripts are removed and externally hosted images are blocked by default, which stops tracking pixels from reporting back when you open a message. We don't read your emails.

How many we keep depends on your plan. A Free address stops accepting new mail once it has received 5 emails; the messages it already received stay in your dashboard until you delete them or your account. On Pro, we keep the latest 5 messages per address and older ones are removed automatically as new ones arrive. When you delete an email yourself, it is removed right away.

On Pro, the files that come with an email are kept in our storage at Cloudflare so you can download them from your dashboard. They are deleted from storage within minutes whenever the email, its address or your account is deleted, and when an older email is pushed out by the newest five. We never save programs or scripts (for example .exe files); the email shows that one was blocked. We don't scan files for viruses yet, so treat attachments from unknown senders with care. Free doesn't keep attachments.

4. Payments

Payments are processed by Paddle, which acts as the merchant of record. Preevit never receives or stores your payment-card details. Depending on your purchase, Paddle shares limited information with us, such as your billing name, the email on the purchase, order and transaction identifiers, the amount and currency, your billing country and your plan status. We use it to give you Pro, verify payment, handle refunds and support you. Read their policy at paddle.com/legal/privacy.

The checkout page on this site loads Paddle's checkout script from Paddle's servers, so Paddle receives your IP address and browser details when you open it. No other page on this site loads anything from a third party.

5. Who helps us run Preevit

We use these providers to run the service, and share with each only what it needs:

• Render hosts our servers and database.
• Cloudflare receives mail sent to your generated addresses and stores message files.
• Postmark delivers our account emails.
• Paddle processes payments and refunds.

These providers may process data outside your country, including in the United States, under their own data-protection terms. We never sell your data.

6. How long we keep it

• We keep your account and what you create while your account exists.
• A Free address that has reached its 5th email stops accepting mail, and its messages stay readable until you delete them or your account.
• If a Pro purchase is refunded, your account returns to the Free plan. Anything above the Free limits (your 3 most recent datasets and their addresses stay) is kept for 30 days so you can take what you need, and then deleted for good, including the emails and attachments that went with it. We email you when this starts. Buying Pro again within the 30 days cancels the deletion.
• Field descriptions you sent are kept for up to 12 months after the last time the same description was sent, then deleted, and identical descriptions are merged into one. Because they are not linked to your account, we cannot tell which ones are yours, and deleting your account does not remove them; they contain nothing about you.
• If you delete your account, we delete your data from our active systems. Short-lived technical copies, such as backups, are overwritten on their normal schedule, and we keep only what the law requires us to.
• Purchases. We keep a record of your Pro purchase (the Paddle transaction ID, the date, the amount and currency, and a one-way fingerprint of the email it was bought with) for as long as it is needed to give you Pro, handle refunds and meet our tax and accounting obligations, even if you delete your account. It lets Pro be restored if the same email address signs up again.
• One exception, to protect the Free plan. When an account that has used part of the Free allowance is deleted, we keep a one-way, keyed fingerprint of its email address (it cannot be turned back into the address) together with a single number: how many Free datasets were used. We keep it for 12 months, then delete it. If the same email address signs up again within that time, the datasets already used still count towards the Free limits. We keep nothing else: no sites, no generated details, no emails. You can ask us to remove it sooner by writing to support@preevit.com, though doing so means that address would then be treated as new.

7. Your choices and rights

You can delete individual emails, addresses and datasets in the dashboard, and delete your whole account in the extension's settings. Deleting an account permanently removes your addresses, emails and datasets, and that can't be undone. It does not reset the Free allowance for the same email address (see “How long we keep it”).

You can also ask us to access, correct, export or delete your data, to restrict or object to how we use it, and you can withdraw consent at any time. Email support@preevit.com and we will reply within one month. If you are in the EU or UK you may also complain to your local data-protection authority.

8. Security and other details

Data travels over encrypted connections, passwords are stored as one-way hashes, generated passwords are encrypted at rest, and access to our systems is limited. No online service is perfectly secure, so Preevit is best used for accounts you could replace if you had to.

Preevit is not intended for anyone under 16, and we don't knowingly collect their data. If we change this policy in a way that matters, we will update the date above and tell account holders by email.

9. Contact

Questions about this policy: support@preevit.com