Frequently Asked Questions

When someone sends an email to your group address (for example, team@mailall.us), our system receives it, checks that the group exists and the sender isn't blocked, then forwards a copy to every active member. The whole process happens in seconds. Your group address works like a mailing list that anyone can send to.

During normal operation, your message passes through our system in memory and is gone the moment it's delivered. We never write message content to a database, log it, index it, or analyze it.

The honest nuance: if delivery to a member fails and your group uses Reliable mode (the default), the system retries automatically. If every retry is exhausted, the original message may sit in an encrypted retry queue for up to 24 hours before it's automatically deleted. This is a rare edge case, not the normal path, but we believe in telling you about it.

If even that is too much, you can switch to Private mode. In Private mode, each message gets a single delivery attempt and is immediately discarded, whether it succeeded or not. No queues, no retries, no retention of any kind.

In both modes, we keep a small amount of delivery metadata (sender address, subject line, timestamp) so we can show you failure notices if something goes wrong. This metadata contains no message body and is automatically deleted after 30 days.

	Reliable (default)	Private
Delivery attempts	Up to 2 per member, plus system-level retries	Exactly 1
Message retention	Encrypted, up to 24 hours on failure	None, ever
Risk of message loss	Very low	Higher if delivery fails
Best for	Most groups	Groups handling sensitive content

You can switch between modes at any time in your group settings. The change takes effect on the very next incoming message.

When a message can't be delivered to a member, we create a failure notice so the group owner knows something went wrong. A failure notice contains only metadata: who sent the email, the subject line, the timestamp, and a brief description of why delivery failed. It never contains the message body. Failure notices are automatically deleted after 30 days.

All data in transit is encrypted with TLS. All data at rest (including retry queues and failure notices) is encrypted with AES-256.

Every paid plan includes a monthly message quota that resets each billing cycle. If you're approaching your limit, we'll email you at 90% and 95% usage so you're never caught off guard.

If you hit 100%, incoming messages are delivered to the group owner only (not all members) for a short grace window, then delivery stops until the next billing cycle.

For busy months, you can purchase a message pack (250 messages for $5, one-time purchase). Message credits never expire, carry across plan changes, and are only consumed after your monthly quota runs out. You can buy as many as you need from your account page.

Yes. You can delete your account at any time from the account settings page. Deletion is a soft-delete; your data is permanently removed after 60 days. If you need to access or correct your data before then, contact privacy@mailall.us.