Privacy policy

Who we are

Domailo offers professional email on the company's domain with an inbox in the browser. It is a service of Oryn Labs, LLC (7345 W Sand Lake Rd, Ste 210, Office 3185 · Orlando, FL 32819 · Estados Unidos), the controller of the personal data processed on Domailo.

This policy explains how we process personal data under Brazil's General Data Protection Law (Law No. 13,709/2018). To contact us about privacy, write to privacidade@domailo.app.

Data we collect

Account: name, email and password (stored as a hash). Organization: name, domains, mailboxes, invitations and access links. Phone/WhatsApp number given at sign-up and the record of your consent to receive activation messages on WhatsApp (the box comes ticked at sign-up and you can untick it; you can reply STOP at any time).

Messages: the content of the emails sent and received by the organization's mailboxes, processed only to provide the service.

Free materials: email, optional name, the originating page, the marketing campaign (UTM) and the record of your consent.

Site usage: session cookies required for sign-in and security, the theme preference and your cookie choice, saved in your browser.

Measurement and ads: until you choose in the cookie notice, Google Tag Manager and Google Analytics count visits and sign-ups without storing cookies or identifiers in your browser (Google Consent Mode stays denied). If you accept, they start using cookies and the Meta and Reddit pixels are loaded to measure campaigns. If you decline, none of them is loaded. This data first passes through measurement servers we contract in Brazil.

Visit origin: we keep in the session the landing page, the referring site and the campaign (UTM), to know how people reach us. This data is only associated with you if you create an account or request a material.

Opens of Domailo e-mails: in the e-mails Domailo itself sends (notices, confirmations, invitations and reminders), our sending provider includes an invisible image that records the first time the message is opened. We keep only the date and time of that open, with the record of the send, for up to 180 days, to know whether our notices arrive and are read (legitimate interest). E-mails from your organization's mailboxes never carry this marker. To avoid being counted, block images from loading in your e-mail program.

What we use it for

To provide the contracted service, protect accounts against abuse, bill subscriptions, meet legal obligations and, when you consent, send materials and communications about Domailo.

Who we share it with

We use processors that handle data on our behalf: email sending and receiving provider, payment processor, bot protection and DNS, scheduled task execution, hosting and the website support chat (loaded only after you accept the cookie notice; it receives your IP address and what you type into it). For WhatsApp messages: the messaging platform provider and Meta (WhatsApp) itself. We do not sell personal data.

With your cookie permission, Google, Meta and Reddit receive browsing data and sign-up and subscription events, with an internal account identifier, to measure the site and the ads. To withdraw permission, clear the site data in your browser and choose Decline in the notice.

Blog content may be produced with the help of artificial intelligence; no customer or message data is used for that.

AI writing in the composer is optional and only works for those the organization's administrator authorizes. When used, the text being edited, the subject and, in replies, the last message received in the conversation are sent to Google (Gemini) to generate the suggestion. Nothing is applied to the email without the writer's confirmation.

International transfer

Oryn Labs, LLC is located in the United States, and some processors handle data in other countries. Therefore, personal data may be stored and processed outside Brazil, always for the purposes described in this policy.

Your rights

You can request access, correction, portability or deletion of your data by email at privacidade@domailo.app. Some information may be kept for the period required by law.

Receiving news by email is optional and separate from the free material. To stop receiving it, use the form at the end of this page: we immediately delete the data linked to your email in the materials and keep only an irreversible hash of it, so we never send news again.

How to delete your account

To delete your Domailo account, created on the website or in the app, see the Delete your account page for how to make the request, what is deleted and what is kept.

Delete your account

Security and retention

Each organization's data is isolated, with access control per person and per mailbox. We keep the data while the account is active or for the period needed for the purposes above.

Data of those who request free materials is kept for up to 24 months after the last request and is automatically deleted at the end of that period.