MailHoor
AboutContactTermsPrivacyRefunds & cancellation

Privacy Policy

Last updated: 6 October 2026

This policy explains what personal data MailHoor collects, why, and the choices you have. MailHoor, Egypt, is the data controller for the account data described here. Privacy contact: support@mailhoor.com.

Data we collect about you

  • Account details: your name, email address, company name, phone number if you give it, and your password (stored only as a secure hash).
  • Billing details: plan, payment status, country and invoices. Card and wallet details are collected by our payment provider, not by us; we keep only the card type and last 4 digits and never see or store full card numbers.
  • Usage and security data: sign-in times, IP address, browser type, settings, and logs of actions in your account, used to run and protect the service.
  • Messages you send us, for example to support@mailhoor.com.

Your contacts' data

When you upload contact lists and send messages, MailHoor processes your recipients' data (such as email addresses, names, phone numbers, and opens, clicks, bounces and unsubscribes) only on your instructions and to provide the service to you. For that data you are the controller and we act as your processor. You are responsible for having a lawful basis to contact them.

Connected apps: Facebook, HubSpot and online stores

You can connect other services to your MailHoor account. MailHoor then reads only what is needed to bring your contacts in, and only for your account:

  • Facebook Lead Ads (Meta). When you click Connect with Facebook, Facebook shares with us your name and Facebook ID, the Pages you choose, an access token for each Page, the names of the lead forms on those Pages, and the leads that people submit to the forms you link to a list (the answers to the form, the time, and the ad and campaign names). We use this only to add those leads to your lists. We do not post on your Pages, change your ads, or use Facebook data for any other purpose, and we do not sell or share it.
  • HubSpot. With the Private App token you give us, we read contact details (email, name, phone, company, city, country, lifecycle stage and email opt-out) to add them to your list. Contacts who opted out of email in HubSpot are not imported.
  • Online stores (Shopify, WooCommerce, Salla and others). Your store sends us order, customer and cart events through webhooks so you can email your buyers.

Leads and contacts brought in this way become your contacts' data, as described above. When you disconnect an app, we delete its access tokens and settings right away; the contacts already in your lists stay until you delete them. To remove the Facebook data we hold, disconnect Facebook in MailHoor, remove MailHoor in your Facebook settings, or follow our data deletion instructions.

Why we use your data

  • to provide your account and the features you use (performance of our contract with you);
  • to take payments and keep accounting and tax records (contract and legal obligation);
  • to keep the service secure, prevent spam and abuse, and protect delivery for all customers (legitimate interests);
  • to send you service messages such as verification codes, security alerts and billing notices (contract);
  • to send product news, only if you agreed, and you can unsubscribe at any time (consent).

Who we share it with

We do not sell personal data. We share it only with providers who help us run MailHoor, each using it only for that purpose:

  • our payment provider, which processes card and wallet payments;
  • our cloud hosting provider, which hosts our servers and backups;
  • Meta (WhatsApp Business Platform and Facebook), only if you connect WhatsApp or Facebook Lead Ads;
  • our AI provider, only when you use the AI writing features; the text you submit is sent to produce the answer;
  • Google Fonts, which serves the fonts on our website and receives your IP address when it loads them;
  • professional advisers and authorities, when the law requires it.

International transfers

Our providers may process data in countries other than yours. Where the law requires it, these transfers rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.

How long we keep it

We keep account data while your account is open. If you close your account, we delete your account and contact data within 30 days, except records we must keep by law (such as invoices). Backups are overwritten on their normal cycle. Unsubscribe and bounce records may be kept longer so we do not email those people again.

Your rights

You can ask to see, correct, export or delete your personal data, object to or limit how we use it, and withdraw consent at any time. Most details can be changed in your account; for anything else write to support@mailhoor.com. We reply within 30 days. You may also complain to your local data protection authority.

Cookies

We use only cookies that the service needs: a cookie that keeps you signed in, and a setting in your browser that remembers your language. We do not use advertising cookies. Emails sent through MailHoor may include open and click tracking, which senders can turn off.

Security

We use encrypted connections (HTTPS/TLS), hashed passwords, optional two-factor sign-in, access controls and regular backups. No system is perfectly secure, so please keep your password and API keys private.

Children

MailHoor is a business service and is not meant for anyone under 16.

Changes

If we change this policy we will update the date above, and tell you by email or in your account if the change is significant.