Privacy Policy — Email Migration | Zero-Disk Data Protection

Effective Date: September 14, 2026

Platform: Email Migration by Hostkro

1. Zero-Disk Guarantee 2. In-Memory Transmission 3. Credentials & Auth 4. Google Analytics (G-T2YYKV71BT) 5. Third-Party Endpoints 6. GDPR & User Rights 7. Contact & Governance

1. The Zero-Disk Storage Guarantee

At Email Migration, we operate strictly under an ephemeral socket streaming architecture. We do not write, cache, copy, log, or store the contents of your email messages, subject lines, body texts, or attachments to non-volatile disk storage or databases.

Zero Data Retention Architecture: When messages are fetched via IMAP from your source provider, they exist solely inside volatile RAM buffers on our high-speed worker nodes. The second the destination mail server confirms receipt (OK APPENDUID), the memory buffer is immediately released.

2. Ephemeral In-Memory Processing

During an active migration job, our service acts as a transparent, high-speed conduit between your source IMAP host and your destination IMAP host. The following data points are processed in transient memory:

Folder Hierarchy: Folder names and delimiters required to replicate tree structures on the target server.
Message Headers: RFC 822 identifiers, UID attributes, flags (\Seen, \Flagged, \Answered), and original date stamps (INTERNALDATE) necessary to guarantee byte-for-byte fidelity.
MIME Streams: Encrypted chunks of message payload streamed directly through encrypted TLS sockets.

3. Credentials & Authentication Security

To perform an email migration, you provide server hostnames, port numbers, usernames, and passwords (or app-specific passwords).

In-Memory Lifecycle: Mailbox credentials are held strictly in encrypted session memory for the duration of the migration worker task.
No Database Storage: Your mailbox passwords are never written to disk, never logged in plaintext, and never stored in long-term relational databases.
TLS 1.3 Encryption: All connections to source and destination IMAP endpoints are established over encrypted TLS/SSL channels (typically port 993).

4. Google Analytics & Website Telemetry

We use Google Analytics (specifically gtag.js with Measurement ID G-T2YYKV71BT) to understand overall marketing website engagement, such as page visits, referring domains, browser versions, and screen resolutions.

Google Analytics collects anonymous usage metrics using cookies or device identifiers. It does not collect or have access to any email addresses, passwords, migration payloads, or server credentials. You can opt out of Google Analytics tracking through browser privacy settings or standard ad-blocker extensions.

5. Third-Party IMAP Endpoints

Our software connects directly to the third-party email providers you designate (such as Google Workspace, Microsoft 365, cPanel, Hostkro, Zoho, or private Dovecot servers). Your interaction with those third-party services is governed by their respective terms of service and privacy policies.

6. GDPR, CCPA & Data Subject Rights

Because we do not store, maintain, or catalog user email archives, there is no email data to delete, export, or monetize upon job completion. Data minimization and the right to erasure are built directly into the software architecture.

For any inquiries regarding your privacy rights or corporate compliance audits, you may contact our Data Protection representative at [email protected].

7. Contact & Governance

This website and service are maintained by Hostkro. If you have questions regarding this Privacy Policy or our security protocols, please reach out to:

Hostkro
Attn: Privacy & Information Security Team
Email: [email protected]
Website: https://hostkro.com