Privacy Policy

Last updated: July 26, 2026

World AI Link ("WOAIL", "we", "us") operates WOAIL Mail ("the Service"), an AI-native email application. This Privacy Policy explains how we collect, use, store, and protect your data when you use the Service.

1. Information We Collect

• Account data: email address (@woail.com or custom domain), password hash, and account preferences.
• Email content: all incoming and outgoing emails, including subject lines, body text, and attachments.
• Usage data: login timestamps, IP addresses, and interaction logs for security purposes.
• AI processing data: email content submitted to AI models for summarization, smart replies, and translation features.

2. How We Use Your Information

• To provide, maintain, and improve the email Service.
• To process AI-powered features such as email summarization, smart replies, and multilingual translation.
• To authenticate your identity and prevent unauthorized access or spam.
• To route and deliver your emails through our mail servers.
• To comply with legal obligations and law enforcement requests.

3. AI Features and Data Processing

WOAIL Mail provides AI-powered features including email summarization, smart replies, multilingual translation, and content generation. The following principles apply to all AI processing:

• On-demand processing: AI features are activated only when you explicitly request them (e.g., generating a summary or reply). Emails are not continuously scanned by AI in the background.
• No model training: We do not use your email content, personal data, or AI interaction history to train, fine-tune, or improve any AI models.
• User control: You may disable AI features at any time in Settings. Disabling AI features will not affect core email functionality (sending, receiving, and organizing emails).
• Accuracy disclaimer: AI-generated summaries, replies, and translations are provided for reference only and may contain inaccuracies. You are responsible for reviewing AI-generated content before sending.
• Data minimization: Only the relevant email content is sent for AI processing. AI results are returned to your session and not permanently stored unless you choose to save them.

4. Legal Basis for Data Processing

If you are located in the European Economic Area, United Kingdom, or other jurisdictions with data protection laws, we process your personal data under the following legal bases:

• Contract performance: processing necessary to provide the email service you requested, including account creation, email sending and receiving, and storage.
• Legitimate interests: processing for security monitoring, fraud prevention, service stability, and bug detection, where our interests do not override your rights and freedoms.
• Consent: processing for optional AI-powered features, which you may withdraw at any time by disabling AI features in Settings.
• Legal compliance: processing required to meet legal obligations, such as responding to lawful requests from authorities.

5. Data Storage and Security

Your data is stored on our global edge infrastructure using encrypted databases, object storage for attachments, and secure key-value stores. All data is transmitted over HTTPS/TLS encryption. Passwords are hashed and never stored in plaintext. Email attachments are stored in encrypted storage buckets.

Access to production systems is restricted to authorized personnel using multi-factor authentication. We conduct regular security reviews and monitor for suspicious activity.

6. Data Disclosure and Sharing

We do not sell, rent, or trade your email content or personal data. We may disclose data only in the following circumstances:

• Law enforcement: when required by valid legal process (subpoena, court order, or other lawful request), we may disclose data necessary to comply with the obligation.
• Security and safety: to protect the rights, property, or safety of WOAIL, our users, or the public from harm, fraud, or abuse.
• Business continuity: in the event of a merger, acquisition, or asset transfer, data may be transferred to the successor entity, subject to the protections of this Privacy Policy.

We will notify you via email before disclosing your data in response to a legal request, unless we are legally prohibited from doing so.

7. International Data Transfers

WOAIL Mail operates globally. Your data may be processed and stored in data centers located in countries other than your country of residence. When transferring data across borders, we rely on appropriate legal mechanisms (such as Standard Contractual Clauses) and ensure that the receiving parties provide a level of data protection consistent with applicable laws.

8. Cookies and Local Storage

The Service uses localStorage and session tokens to maintain your login session. We do not use third-party tracking or advertising cookies.

9. Do Not Track Signals

Some browsers offer a "Do Not Track" (DNT) signal. Because there is currently no industry consensus on how to interpret DNT signals, we do not currently respond to them. We do not use third-party tracking cookies or advertising networks. This Privacy Policy and our data practices are independent of DNT settings.

10. Data Retention

Emails are retained for as long as your account is active. You may delete individual emails at any time. Account deletion requests can be sent to support@woail.com, after which all associated emails, attachments, and data will be permanently deleted within 30 days.

Security logs (such as login IP records) are retained for up to 90 days for fraud detection and security auditing purposes, then automatically purged.

11. Your Rights

• Access: request a copy of your personal data.
• Rectification: correct inaccurate data.
• Erasure: request deletion of your account and all associated data.
• Portability: export your emails in standard formats.
• Objection: object to processing based on legitimate interests or for direct marketing.
• Withdrawal of consent: withdraw consent for AI processing at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at support@woail.com. We will respond within 30 days.

12. Account Security Responsibilities

You are responsible for maintaining the security of your account:

• Use a strong, unique password and enable two-step verification (TOTP).
• Do not share your password, session token, or TOTP secret with anyone.
• Only mark devices as "trusted" if you have sole control over them.
• Notify us immediately at support@woail.com if you suspect unauthorized access to your account.

We are not liable for losses resulting from compromised credentials that you failed to safeguard.

13. Children's Privacy

The Service is not intended for users under the age of 13. We do not knowingly collect data from children. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

14. Changes to This Policy

We may update this Privacy Policy periodically. Significant changes will be notified via email at least 30 days before taking effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

15. Contact Us

Questions about this Privacy Policy? Contact us at support@woail.com.