Webby is committed to protecting the privacy of your personal information, as well as your clients’ privacy, as email is processed through the service.
When an email is sent through Webby:
-
A StartTLS or SSL connection is required to connect and send email, ensuring traffic is encrypted in transit.
-
The email is checked and scored by Webby’s anti-spam system.
If an Email Is Blocked
-
The email is rejected during SMTP delivery with a 5xx bounce error.
-
The email body is immediately removed and is unrecoverable.
-
Email headers are retained in logs for up to 60 days.
-
A one-way hash of the email body or attachments may be retained to help identify and track spam campaigns.
If an Email Passes Filtering
-
The email body is stored temporarily in a database.
-
Delivery will be attempted and may retry multiple times due to factors such as grey-listing or remote mail server behaviour.
-
Remote SMTP responses (success or failure) are logged for 60 days.
-
On successful delivery:
-
The email body is deleted
-
Headers are retained in logs for 60 days
-
-
On delivery failure:
-
The email bounces
-
The email body is deleted
-
Headers are retained in logs for 60 days
-
Infrastructure & Data Handling
-
Webby handles all delivery from controlled IP ranges located in the United States.
- No public cloud services are used for email storage or email transport.
Webby Spam-Prevention Techniques
Webby uses a combination of industry-standard and internally developed techniques to combat spam and abuse, including:
-
Third-party feedback loops
Emails relayed by Webby may be reported by recipient mail providers through established feedback loops. These reports are generated by third parties, not by Webby itself, and may include the body of the email. All feedback loop reports are manually reviewed by Webby staff as part of abuse management. -
IP and domain reputation checks
Webby evaluates IP addresses and domains found in email headers and bodies using well-known external reputation services, alongside internally maintained reputation systems. These checks are standard practice across the email industry and should be expected for any outbound email service. -
Fuzzy hashing
Webby may create one-way fuzzy hashes of email content. These hashes are compared against known spam campaigns and previously reported junk email to help identify abuse patterns.
Purpose & Limitations
Webby is designed first and foremost to protect:
-
Email accounts
-
Sending IP reputation
-
Networks from spam, phishing, malware, and email-borne threats
Because spam and malware techniques constantly evolve, some emails may be blocked due to suspected spam, phishing, or malicious content. This may occasionally include false positives. Any false positives can be reported via the web-based bounce URL or by contacting Webby support, and will be reviewed accordingly.
