Official Privacy Policy & Google API Compliance

Privacy Policy

Effective Date: November 05, 2026 • Published by Cyphex Agency (cyphex.agency)

Cyphex Mail is a Project of Cyphex Agency

Cyphex Mail (mail.cyphex.agency) is an enterprise communications platform operated and governed by Cyphex Agency (cyphex.agency). We are dedicated to safeguarding client privacy, maintaining enterprise-grade confidentiality, and adhering strictly to international data protection standards.

Google API Services User Data Policy Compliance

Cyphex Mail's use and transfer of information received from Google APIs adheres strictly to the Google API Services User Data Policy, including the Limited Use requirements:

Limited Use Purpose

Google user data is accessed solely to authenticate identity and route authorized internal communications.

Zero Third-Party Sales

We never sell, rent, or disclose Google user credentials or emails to data brokers or advertisers.

Zero AI Model Training

User correspondence is never used to train, retrain, or fine-tune public foundation AI models.

Human Review Restrictions

No human engineer ever inspects message contents without explicit written customer consent.

1. Information We Collect

We collect information required to operate dedicated white-label email services for your domain:

  • Account Profile Data: Full name, corporate email address, encrypted password hash, and company/tenant identifier.
  • Authentication Data: Time-based one-time password (TOTP) verification tokens, trusted device identifiers, and Google OAuth credentials.
  • Communications & Transmissions: MIME headers, subject lines, message bodies, and attachments routed via your custom domain.
  • System Telemetry: Edge server logs, IP addresses, browser user agent, and timestamp metrics used strictly for intrusion prevention and rate limiting.

2. Security & Encryption Standards

All data in transit is protected using TLS 1.3 / 256-bit SSL encryption with strict HSTS preloading. Stored message bodies, credentials, and authentication secrets are protected by AES-256 GCM encryption at rest on Cloudflare and AWS infrastructure.

3. Your Rights & Data Deletion

Every user and organization administrator holds complete rights to export correspondence, update credentials, revoke active sessions, and request permanent erasure of all tenant data.

To submit an account erasure or data export request, email our Data Protection team directly at contact@cyphex.agency.

Contact & Governance Verification

For any questions regarding this Privacy Policy, contact Cyphex Agency directly:

OrganizationCyphex Agency
Operating ModelRemote-First Digital Engineering Firm
Direct Emailcontact@cyphex.agency
Official Websitecyphex.agency