Security and access
Your campaigns leave from your mailboxes. We protect platform and connection access — without selling your sending reputation.
Connecting your mailboxes
We only ask for the access needed to send and follow campaigns from the addresses you already use.
- Microsoft 365: OAuth authorization — no Microsoft password ever touches MailContactDaemon.
- SMTP / IMAP: credentials are encrypted; we test the connection before saving it.
- You can revoke access on the provider side (Microsoft or your server) at any time.
Access to your account
Application access is protected before any useful session starts.
- Email verification is required before a session is opened.
- Client users confirm sign-in with an email code.
- Password change and recovery with attempt limits and session invalidation after a change.
Isolation and team
Each organization’s data stays separate. Team roles limit what each person can see or change.
- Multi-organization isolation: one organization’s data does not appear in another.
- Roles (admin, campaign manager, viewer) to share work without sharing everything.
- Suspending an account or organization blocks access immediately.
Data and hosting
We operate in Europe and do not put our brand on your messages.
- Infrastructure and data in the European Union.
- No MailContactDaemon logo on the campaigns you send.
- Contacts and history exportable whenever you need them.
Frequently asked questions
Do you store my Microsoft 365 password?
No. Microsoft 365 connects through OAuth. You can revoke access from your Microsoft account without going through us.
What about SMTP or IMAP?
Credentials are encrypted at rest. We test the connection before saving them and never show them again in plain text.
Who on my team can see what?
It depends on the role in the organization. A viewer can browse; a campaign manager prepares and launches; an admin manages the organization.
Ready to connect your first mailbox?
Start free or build the plan with the volume you need.
