Privacy & account integrity

Account integrity & privacy

One person, one account. ANEXOMAIL is a business mail and calendar service, and it only works if a person who has been removed for abuse cannot simply return under a new name. To protect every other customer, we compare each new sign-up against records of people who have been blocked.

What we check

• Account details: your sign-in address, your recovery address and, if you subscribe, your payment method reference.
• A device key: a cryptographic key your browser creates for itself. Its private half never leaves your browser.
• Technical characteristics of your browser and computer: for example platform, screen size, the capability limits of the graphics hardware, which system fonts are installed, how the browser renders text and audio, time zone and language. These are technical settings, not biometric data, and nothing is read from your body, camera, microphone or contacts.
• The network a sign-up comes from, to notice many accounts being created in a short time.
• Temporary email addresses are not accepted as a recovery address.

How it is protected

Your browser reduces each group of characteristics to a one-way digest before anything is sent; the raw values never leave your device. Our server then protects every value with a secret key that exists only on our servers, so what we store cannot be turned back into the original information, and cannot be matched by anyone without that key. We keep device and browser records for 180 days and network records for 30 days. Records tied to an address or payment method last as long as the account. If you delete your account, its records are deleted with it. Records of a blocked person are kept for two years by default, and permanently only for severe abuse, so that the block cannot be sidestepped.

This is used for one purpose only: to stop abuse, spam and fraud at sign-up. It is not used for advertising, profiling or tracking you across other sites. You can see and revoke your own devices at any time, and revoking one ends its live sessions immediately.

What happens when something matches

• A sign-up that reuses a verified detail of a blocked person (the same email, recovery address, payment method or device key) is refused. The person can appeal in writing and a human reads it.
• Browser and hardware characteristics alone never block anyone, because many people own identical devices. A sign-up that closely resembles a blocked person’s browser is created but kept on hold until a member of our team reviews it. A held account cannot be used and cannot sign in. If a review is not completed within 30 days, the hold is closed and the account stays locked.
• Some privacy-focused browsers deliberately hide these characteristics. A sign-up from such a browser may also be placed in review. If your account is approved, we email you at your recovery address.
• During the first 7 days a new account has limits: messages to up to 20 people at a time, up to 50 messages a day, and no invitations, public links or bulk imports. The limits end after 7 days, or immediately when you subscribe to a plan.
• Every block can be appealed in writing, up to 20,000 characters, with up to five evidence files (screenshots, PDF, text, email or Office documents). Files are scanned, visible only to the reviewers who decide your appeal, and deleted 90 days after the decision. Every reviewer download is logged.

Fair use & your data on exit

• A device used to reach 3 or more accounts, or to create 3 or more accounts within 24 hours, is marked suspicious and reviewed.
• A confirmed violation receives one written final warning before any account is blocked.
• A repeat violation blocks the account, and a severe pattern adds the device to the ban list so it cannot create new accounts.
• A blocked account keeps full export access for 72 hours. After that window the data is permanently deleted, as committed.
• Your conversations are never sent to any AI or third-party moderation service. File safety runs on our own infrastructure. The checks above never read the content of your mail or calendar.