Privacy Policy

Last updated: 16 October 2026

WideMail is the mail app of Wideview Entertainment ("we", "us"), an email and web hosting provider, for mailboxes hosted with Wideview. This policy explains what data we process when you use the app and the web version, and how we protect it. We respect your privacy and process data only as needed to run the service.

What data we process

Sign-in credentials. The email and password of your mail account, so we can connect to your email server (IMAP and SMTP). Where a WideMail account was set up for you (one sign-in that opens several mailboxes), its password is stored as a salted hash and can never be recovered in plain text.
Mail content. Your messages, contacts and folders, so you can read, send and organise them through the app.
Camera, microphone and photos. Only when you choose to attach a photo or video to an email, or add a photo to your signature. Your device requests permission where required, or lets you choose files through its system picker. You can manage permissions in your device settings. A photo or video you attach travels with your email through your mail server; we keep no copy of it. Signature images are stored on our content server so that they display in the emails you send.
Technical logs. The IP address and app or browser version of each sign-in, and delivery records (the recipient and subject of mail you send, the sender of mail we notify you about), kept for up to 90 days for security and troubleshooting.
Device data for notifications. A unique push token for your device, its app language and time zone, so we can send you new-email and optional open notifications, with dates and times formatted for your device. The notification delivery provider processes the token and notification content, which may include the sender, subject, intended recipient, open time and a message preview.
Technical diagnostics. Limited error and performance information, so we can find and fix problems.

How it is stored and protected

Your password is stored encrypted with AES-256-GCM and is decrypted only temporarily, in memory, at the moment it is needed to connect to your server. It is never stored in plain text.
Your mail content stays on your email server. The app retrieves it to display it to you and does not keep its own permanent copy of your messages.
All communication between the app, our servers and your email server uses an encrypted connection (TLS).

How we use the data

We use the above solely to provide the email service: connecting to your account, reading and sending messages, notifications and keeping the app stable. We do not sell your data. We do not use it for advertising. We do not read your mail.

Optional email open signals

When “Open notification” is enabled for an outgoing email, WideMail adds a small remote image with a random identifier. Loading this image can record the first open time and notify the sender through the app and Apple or Google push services. The sender can see the signal and timestamp on that email and in its conversation, and can stop further tracking from the message details. Open notification is preselected for new emails, replies and forwards. The sender can uncheck it before sending. Existing drafts keep their saved choice, and tracking is not added retroactively to older messages.

The record contains the sending account, message identifier, subject for the notification, recipient count, the intended recipient’s name or address when there is a single recipient, first signal time and tracking status. It does not store the message body, IP address, user-agent or location in the open-tracking record. Image requests necessarily pass through our server infrastructure. The pixel accepts signals for 90 days; the existing status remains with the sending account until account deletion. Stopping tracking prevents new signals but retains the recorded first-open time.

An open signal is not proof that a person read the email. Blocked images can prevent a signal; privacy features, image proxies and forwarded messages can trigger one without human reading. A message with multiple recipients does not identify which person opened it.

Sharing with third parties

We do not share your personal data with third parties, except for the infrastructure providers necessary to run the service (server hosting, Cloudflare for the storage of signature images and for serving this website, delivery of push notifications through Apple Push Notification Service on iOS and Google Firebase Cloud Messaging on Android, and a self-hosted error-tracking service). These providers process data only on our instructions and for the purposes of the service.

Data retention

We keep your sign-in details and settings for as long as you maintain an active account. When you disconnect an account or request deletion, the encrypted credentials and related settings are deleted from our systems.

Your rights

Under the General Data Protection Regulation (GDPR), you have the right to access, rectify, erase and restrict the processing of your data, as well as the right to data portability and to object. To exercise any of these, contact us at [email protected].

Children

The service is intended for business use and is not directed at children under 16.

Changes to this policy

We may update this policy. We will post any change on this page with an updated date.

Contact

Data controller: Wideview Entertainment E.E. (TSOKAS G. WIDEVIEW ENTERTAINMENT E.E.).
Registered address: 58 Grigoriou Lampraki, 16675 Glyfada, Greece. VAT EL803334554; G.E.MI. 194800101000.
Email: [email protected]
Website: wideview.co