Privacy Policy

Last updated: 19 March 2026

Who we are

ChiveSupport is a support inbox for solopreneurs, operated from Stamford, United Kingdom. When this policy refers to "we", "us", or "our", it means ChiveSupport.

What data we collect

We only collect data that is necessary to provide the service. We do not use analytics, tracking pixels, or advertising cookies.

Account information

  • Email address
  • Display name

Mailbox information

  • Mailbox name and slug (your unique URL identifier)
  • Auto-reply message
  • Mailbox logo (if uploaded)

Customer information submitted via contact forms

  • Name and email address
  • Subject and message content
  • Attachments (if uploaded)

Ticket and conversation data

  • Ticket references, message bodies, timestamps, and ticket status
  • Attachments uploaded by customers or operators

How we use your data

  • To create and manage support tickets submitted via your contact forms
  • To display conversations on web pages accessible via unique token URLs
  • To send notification emails to customers when you reply to a ticket
  • To send confirmation emails to customers when they submit a new ticket
  • To send you authentication emails (magic links) so you can sign in
  • To manage your subscription to ChiveSupport
  • To store and serve file attachments

Authentication

We use passwordless magic link authentication. When you sign in, we send a one-time link to your email that expires after 15 minutes. We do not store passwords. Magic link tokens are hashed with SHA-256 before storage. A session token is stored in your browser's local storage and sent with each request. You can revoke it at any time by logging out.

Customer access to conversations

Customers do not need to create an account or log in. Conversation pages are accessed via unique, unguessable token URLs. These URLs are included in notification emails and allow the customer to view and reply to their ticket on the web.

Third-party services

We share data with the following services only as needed to operate the platform:

Stripe

We use Stripe to process subscription payments for your ChiveSupport account. Data shared with Stripe includes your name, email address, and payment details. Stripe's privacy policy is available at stripe.com/privacy.

Mailgun

We use Mailgun's EU infrastructure to send transactional emails, including magic link sign-in emails, ticket confirmation emails, and reply notification emails. Data shared with Mailgun includes recipient email addresses, names, and email content. Mailgun's privacy policy is available at mailgun.com/legal/privacy-policy.

S3-compatible storage

We use S3-compatible object storage to store file attachments uploaded by customers and operators. Files are stored securely and accessed via pre-signed URLs with limited expiry.

Cookies and tracking

We do not use cookies, tracking pixels, or third-party analytics on our marketing site or application. The only client-side data we store is your authentication token in local storage, which is removed when you log out.

Data security

  • Authentication tokens are cryptographically random and magic link tokens are hashed with SHA-256 before storage
  • Conversation tokens are unguessable UUIDs — knowing a ticket reference does not grant access
  • All connections to third-party services use HTTPS
  • Email is sent via Mailgun's EU infrastructure
  • File attachments are served via pre-signed URLs with limited expiry

Data retention

Your account data, mailbox configuration, and ticket records are retained for as long as your account is active. Magic link tokens expire after 15 minutes and are marked as used once redeemed. If you wish to have your data deleted, please contact us and we will remove your account and associated data.

Your rights

Under UK data protection law, you have the right to access, correct, or delete your personal data. You may also request a copy of the data we hold about you. To exercise any of these rights, contact us at the address below.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date at the top of this page.

Contact

If you have questions about this privacy policy or how we handle your data, please email us at support@chivesupport.com.