1. General Information

Aionda Mail takes the protection of personal data very seriously and processes it exclusively in accordance with applicable data protection laws, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Please note that Aionda Mail is not an anonymous service. Personal data is neither sold nor shared with third parties. Furthermore, no online advertising is displayed on our website.

2. Processing and Storage of Personal Data

Aionda Mail follows the principle of data minimization and only stores the data necessary for the provision and functionality of the service.

a) Types of Stored Data

• Email addresses (temporary and, if applicable, real email addresses for forwarding)
• IP addresses (for abuse prevention and security monitoring)
• Log data (timestamps and technical information about email traffic)
• Session data (e.g., for authentication of logged-in users)

b) Data Retention Period

Personal data is only stored for as long as necessary for the respective purpose.

• Email traffic logs can be viewed and managed by users according to their individual settings.
• Database backups are stored in highly encrypted form on external servers. The private key for these backups is not stored on Aionda Mail servers.

3. Security of Email Communication

Aionda Mail implements state-of-the-art security measures to ensure the confidentiality and integrity of email communication.

• Outgoing emails are sent using passive TLS encryption, provided the receiving email infrastructure supports it.
• Email traffic is recorded in the logging function, which can be accessed by the respective user.

4. Website Security

The Aionda Mail website is accessible exclusively via an encrypted HTTPS connection (2048-bit SSL certificate). Our security measures are regularly reviewed and externally evaluated. The security service provider Qualys SSL Labs has rated our website with an "A+" security grade.

5. Use of Cookies

Aionda Mail only uses technically necessary cookies that are required for the basic functionality of the service.

• These cookies primarily serve session management (session cookies).
• No tracking or analytics cookies are used.

6. Use of a Content Delivery Network (CDN)

To optimize loading times and improve availability, Aionda Mail uses the Content Delivery Network (CDN) of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA.

Cloudflare processes certain technical connection data (e.g., IP addresses and access data) to securely and efficiently deliver the website. Cloudflare complies with the EU-U.S. Data Privacy Framework (DPF) as a replacement for the former Privacy Shield agreement. More information can be found in Cloudflare’s privacy policy: https://www.cloudflare.com/security-policy.

7. AI Assistant (Cloud AI)

Aionda Mail includes an integrated AI assistant (e.g. for summarizing, translating and drafting emails). Processing takes place exclusively on our own self-hosted AI server hardware in Germany. No third-party providers (such as OpenAI or Google) are used and no data is transferred to third parties.

• For AI processing, the affected content (e.g. the text of an email) is temporarily transmitted to our AI server in decrypted form; end-to-end encryption is selectively bypassed for this purpose.
• Content is processed solely to answer the specific request and is neither stored nor used to train AI models. Only anonymous usage counters are stored.
• For new accounts the AI assistant is enabled by default; this is disclosed during registration. The legal basis is consent (Art. 6(1)(a) GDPR).
• The AI assistant can be disabled at any time in the settings under “Artificial Intelligence” or switched to a local AI running in the browser (withdrawal with effect for the future).