Privacy Policy

Effective Date: Jun 25, 2025

Warmbly (“we”, “us”, “our”) is operated by Mindroot Ltd. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website warmbly.com and associated services (the “Services”). By accessing or using our Services, you agree to the collection and use of information in accordance with this Privacy Policy.


1. Information We Collect

a) Account Information

When you create an account, we collect only the minimum necessary information:
• Email address
• Password
• Timestamps

Passwords are hashed securely using Argon2 before storing in our database to protect your credentials.

b) Mailbox Data

If you connect mailboxes to our Services, any sensitive data associated with those mailboxes is stored in encrypted form to ensure confidentiality and security.

c) No Additional Tracking

We do not collect IP addresses, device information, cookies, or any other tracking data.

2. How We Use Your Information

We use your information solely for:
• Providing and maintaining the Services
• Authenticating users and securing accounts
• Communicating important updates and support messages
• Improving and developing new features
• Ensuring compliance with legal obligations

We do not collect or process any personal data beyond what is strictly necessary for the operation of the Services.

3. Data Storage and Security

• All user data is stored on Amazon Web Services (AWS) infrastructure, specifically using Amazon RDS for PostgreSQL databases.
• Passwords are hashed with Argon2 algorithm before storage.
• Sensitive mailbox data is stored encrypted at rest using industry-standard encryption methods.
• We implement appropriate technical and organizational measures to safeguard your data against unauthorized access, alteration, or destruction.

4. Data Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share data only when required by law or to protect our rights and property.

5. Your Rights

Depending on your jurisdiction, you may have rights regarding your personal data, including:
• Access to your data
• Rectification of inaccurate data
• Deletion of your data (“right to be forgotten”)
• Restriction of processing
• Data portability

To exercise these rights, please contact us at [email protected].

6. Children’s Privacy

Our Services are not directed to children under 13 years of age. We do not knowingly collect personal information from children under 13.

7. Changes to This Privacy Policy

We may update this Privacy Policy periodically. We will notify you of any significant changes by posting the new policy on our website. Continued use of the Services after changes constitutes acceptance of the updated policy.

8. Contact Us

If you have any questions or concerns about this Privacy Policy or your data, please contact:
Mindroot Ltd.
Email: [email protected]