Privacy Policy

1. Who handles your information

The Red Collar Company, based in Pennsylvania, United States, operates Mason. Contact mason@redcollar.io with privacy questions or requests.

Mason manages information about its own customers and visitors. When a business uses Mason for its mailboxes, that business may also determine how the information in its email is used. If your request concerns another business's correspondence, contact that business as well.

2. Information we process

• Account information: your name, email address, verification status, protected password information, and sign-in sessions.
• Email and project information: domains, mailbox addresses, sender and recipient details, messages, attachments, contacts, folders, labels, filters, branding, and signatures.
• Connection information: team access, agent permissions, authorization records, and credentials for integrations you choose to enable, such as DNS management.
• Billing information: Stripe customer and subscription identifiers, plan and payment status, and information you provide to Stripe during checkout. Payment card details are handled by Stripe rather than stored by Mason.
• Service and security information: activity records, timestamps, sending usage, errors, and network or device information processed by the service and its hosting providers.
• Support information: information you choose to include when contacting us.

3. Why we use information

We use information to operate your account and inboxes, send and receive mail, connect your domains, process subscriptions, carry out your authorized agent and team actions, provide support, and maintain the service.

We also use information to prevent spam and fraud, enforce permissions and service limits, investigate security incidents, handle disputes, and comply with legal obligations. Where applicable, these purposes rely on performing our agreement with you, our legitimate interests in operating and protecting the service, legal requirements, or consent for optional features.

We do not sell your personal information or use the contents of your mail to target advertising.

4. Providers and connections

We share information with service providers as needed to operate Mason. These include AWS for mail infrastructure and delivery, Railway for application hosting and storage, Stripe for billing, and Google Fonts for font delivery. Their services may process information such as network addresses and technical request data.

Email is transmitted to the recipients and mail providers involved in delivery. Team members can access inboxes according to the access you grant. If you connect an agent, it can receive the information permitted by its approved scopes; its provider may then process that information under its own policies. If you enable Namecheap DNS management, the relevant credentials and DNS requests are used with Namecheap to perform that work.

We may disclose information when required by valid legal process, to protect people or the service, or in connection with a business transfer subject to appropriate privacy protections. We do not provide agents with account passwords or stored integration secrets through Mason tools.

AWS · Railway · Stripe · Google · Namecheap

5. Cookies, browser storage, and email images

Mason uses essential cookies to keep you signed in and support account security. The optional illustrative app preview may save its settings in your browser. Mason does not currently use advertising cookies or marketing analytics on the website.

Stripe and external services may use their own cookies and technologies when you visit them. Your browser can block or clear cookies, although doing so may prevent sign-in or other essential features from working.

External images in received messages are blocked by default. If you choose to load them, the image host may receive a request and related network information. Links in messages and external websites have their own privacy practices.

6. Security, storage, and retention

Mason uses access controls, secure web connections, protected credentials, and restricted agent permissions to help safeguard information. Email must be processed by mail infrastructure to be delivered and displayed; Mason is not an end-to-end encrypted email service. No service can guarantee absolute security.

Information is retained while needed to provide your account and mail service. You can manage individual messages, contacts, and project content in Mason. Contact us to request account closure or deletion. Canceling billing alone does not delete your mail.

Deleted information may remain for a limited period in recovery backups. We may retain information needed for legal obligations, billing records, security investigations, or disputes. We restrict retained information to those purposes and remove it when it is no longer needed.

Mason's infrastructure is operated in the United States. Email recipients, providers, or integrations you choose may process information in other locations. Contact us with questions about where your information is processed.

7. Your choices and requests

You can update your profile, manage mailbox content and project access, change or revoke agent permissions, disconnect optional integrations, and manage your subscription in account settings.

Depending on your location and the circumstances, you may have rights to access, correct, export, delete, restrict, or object to processing of your personal information, or withdraw consent for optional processing. Send requests to mason@redcollar.io. We may need to verify your identity and authority before responding.

You can also complain to an applicable privacy regulator. We do not treat you unfairly for making a privacy request. Where another business controls the information in its correspondence, that business may need to respond to your request.

8. Children

Mason is intended for adults and is not directed to children. If you believe a child has provided personal information through Mason, contact us so we can investigate and take appropriate action.

9. Updates

We may update this policy as the service or legal requirements change. The date at the top identifies the latest version. We will provide notice of material changes where appropriate.