maeil

Privacy Policy

Effective date: July 15, 2026  ·  maeil.cc

Who we are

maeil ("we," "our," or "us") is a service that lets people send calendar invitations to a recipient's phone number via SMS. We are operated by CB Industries LLC. Contact us at maeil@cb-industries.co.

Information we collect

We collect only the information necessary to deliver the service:

• Phone numbers — provided by an event organizer, who must have the recipient's prior express permission to contact them about scheduling — used solely to send transactional SMS messages about the calendar event.
• Email addresses — collected when a recipient chooses to RSVP, so we can return their response to the event organizer.
• Calendar event details — title, date/time, location, and organizer name — needed to compose the invitation SMS.
• Calendar connection tokens (optional) — if you choose to connect your Google or Microsoft calendar (see below), we store an encrypted access token so we can add a confirmed guest's email to your own event. You can disconnect at any time, which revokes and deletes that token.

How we use your information

We use the information listed above only to:

• Send you a single transactional SMS containing the event details and a secure link to accept or decline.
• Send follow-up SMS messages limited to RSVP and scheduling confirmations directly related to the same event.
• Return your RSVP response (and email address, if provided) to the event organizer.

We do not use your phone number or any personal information for marketing, advertising, or promotional purposes.

Account holders (senders)

If you create a maeil account to send invitations, we also store your account email address, your hashed password and security settings, your invite and reveal history, and your account and billing preferences — used only to operate your account, enforce sending limits, and provide the service. Billing is processed by Stripe; we do not store full payment card numbers. You can delete your account and its associated history at any time from your dashboard or by emailing maeil@cb-industries.co.

Connecting your Google or Microsoft calendar

maeil offers an optional feature that adds a guest to your event automatically. If you connect your Google or Microsoft calendar, you grant maeil permission (via Google OAuth or Microsoft OAuth) to make one specific change on your behalf: when a guest you invited confirms and shares their email, maeil writes that email onto the guest list of your own event — the same event you created. That is the only action maeil takes with this access.

Scope. We request the narrowest scope that allows this: Google calendar.events (edit events) and Microsoft Calendars.ReadWrite. We do not read your calendar for any other purpose, do not access events unrelated to a maeil invitation, and do not create, delete, or share your events.

Token storage. To perform this write when a guest responds, we store the calendar provider's refresh token. It is encrypted at rest using AES-256-GCM and is never stored or logged in plain text. We use it solely to add confirmed guests to your events. When you disconnect a calendar (from your dashboard) or delete your account, we revoke the token with the provider and delete it from our systems.

Limited Use. maeil's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically, we use Google calendar data only to provide and improve the user-facing feature described above; we do not transfer or sell this data to third parties; we do not use it for advertising; we do not use it to train generalized or foundation AI/ML models; and no humans read this data except as necessary for security, to comply with the law, or with your explicit consent. The same limitations apply to data received from Microsoft.

SMS messaging

Message frequency: Low volume — typically one invitation SMS per event, plus one confirmation if you RSVP. We do not send recurring marketing messages.

Message and data rates may apply. Standard carrier rates for SMS and data apply to all messages sent by maeil.

To stop receiving messages: Reply STOP to any message at any time. You will receive one final confirmation and will receive no further messages.

For help: Reply HELP or email maeil@cb-industries.co.

Sharing of information

We do not sell, rent, share, or disclose your mobile phone number or personal information to third parties for their own marketing or commercial purposes.

We share information only as necessary to deliver the service, with the following sub-processors, each bound by its own privacy policy and applicable law:

• Twilio — SMS delivery (transmits invitation and confirmation messages).
• Resend — email delivery (RSVP notifications to organizers).
• Cloudflare — application hosting and database (stores accounts, invites, and encrypted tokens).
• Stripe — payment processing for paid plans (we do not store full card numbers).
• Google and Microsoft — only if you connect a calendar, to write a confirmed guest onto your own event, as described above.

Data retention

Invite data — the recipient's phone number, the event details, the invitation message, and the accept link — is automatically deleted 90 days after the invitation is sent.

Captured contact details — when a recipient accepts and shares their email, that email and their response are saved to the sending organizer's account (shown in their dashboard). Because the recipient chose to share this with the organizer, we retain it in that account until the account holder deletes it or deletes their account.

Compliance records — we keep a minimal record of consent attestations and message events for as long as needed to comply with telecommunications regulations (such as the TCPA). Opt-out (STOP) records are kept indefinitely so we can continue to honor them.

You may request deletion of your data at any time by emailing maeil@cb-industries.co, or delete your account and its history from your dashboard.

Data security

We protect your information — including any Google or Microsoft calendar data — with industry-standard safeguards:

• Encryption in transit. All data exchanged with maeil, and with Google, Microsoft, and our other providers, travels over encrypted TLS/HTTPS connections.
• Encryption at rest. Stored data is encrypted at rest. In addition, calendar OAuth refresh tokens are individually encrypted using AES-256-GCM and are never written to logs or stored in plain text.
• Access controls. Access to production systems and stored data is restricted to authorized personnel and used only to operate the service, secure it, or comply with the law. No human reads your calendar data except as necessary for security, to comply with the law, or with your explicit consent.
• Secure deletion. When you disconnect a calendar or delete your account, we revoke the relevant token with the provider and delete it from our systems, and invite data is automatically deleted on the schedule described above.

We use a third-party AI service to help our customer-support team triage and route incoming support messages. This support tooling does not receive your Google or Microsoft calendar data, and we do not use any data obtained through Google or Microsoft APIs to develop, improve, or train any AI or machine-learning model.

Your rights

You may request access to, correction of, or deletion of any personal information we hold about you. Contact us at maeil@cb-industries.co and we will respond within 30 days.

Changes to this policy

We may update this policy periodically. Material changes will be reflected by an updated effective date above. Continued use of the service constitutes acceptance of the updated policy.

Contact

CB Industries LLC
Email: maeil@cb-industries.co

← Back to maeil.cc