# MailHaap

> One domain. Your team's mailboxes, your app's transactional email, and your marketing campaigns — with the deliverability engineering already done.

MailHaap is an email platform covering three jobs on one domain identity: real IMAP/SMTP mailbox hosting, a transactional REST API and SMTP relay, and bulk marketing campaigns with a free drag-and-drop template builder. Each is an isolated sending plane with its own reputation, so a bad campaign can never stop a password reset. Operated by AtaForge Inc.; data resides in the EU by default.

## Product

- [Transactional API](https://mailhaap.com/product/transactional-api): REST and SMTP relay. Accept p99 under 150 ms, idempotency keys, signed webhooks with a 7-attempt retry schedule, unlimited test mode, SDKs for Node, Python, Go, PHP and Ruby.
- [Campaigns](https://mailhaap.com/product/campaigns): Segments, preflight checks that block bad sends, a pacing controller reading live bounce and complaint rates, per-ISP pacing, and send-in-recipient-timezone.
- [Mailboxes](https://mailhaap.com/product/mailboxes): IMAP 993, submission 587/465, MX inbound. Autodiscover and autoconfig. Migration from Google Workspace or Microsoft 365 with a 7-day dual-delivery window.
- [Template builder](https://mailhaap.com/product/template-builder): Free forever, no watermark, no signup to build or export. JSON block document compiled to email-safe HTML with MSO conditionals and VML fallbacks. RTL first-class.
- [Deliverability](https://mailhaap.com/product/deliverability): Per-plane reputation isolation, a warm-up ladder that advances on health, internal thresholds below the provider's, and a 0-100 score shown with every contributing factor.
- [Pricing](https://mailhaap.com/pricing): Two meters. Mailboxes EUR 2.99-6.99 per mailbox/month by storage. Sending free to 3,000 recipients/month, then EUR 19 / 69 / 199 for 50k / 250k / 1M.

## Free tools (no signup, no email gate)

- [SPF checker](https://mailhaap.com/tools/spf-checker): Two SPF records is a permerror. Eleven lookups is a permerror. This finds both.
- [DMARC checker](https://mailhaap.com/tools/dmarc-checker): p=none is monitoring, not protection. See where you are and what to publish next.
- [MX lookup](https://mailhaap.com/tools/mx-lookup): Identifies the provider behind the MX hosts, and warns when there is no backup.
- [Blacklist check](https://mailhaap.com/tools/blacklist-check): Spamhaus SBL, XBL, PBL and DBL, plus Barracuda, SpamCop, SORBS and Invaluement.
- [Header analyser](https://mailhaap.com/tools/header-analyser): Finds where a message was delayed, and which of SPF, DKIM and DMARC actually passed.

## Documentation

- [Quickstart](https://mailhaap.com/docs/quickstart): Add a domain, publish the DNS records, create an API key, and POST to /v1/emails.
- [Authentication](https://mailhaap.com/docs/authentication): Every request carries a bearer token in the Authorization header.
- [Error codes](https://mailhaap.com/docs/errors): Errors are RFC 9457 problem documents with a stable machine code, a request id and a documentation URL.
- [Webhooks](https://mailhaap.com/docs/webhooks): Configure up to five endpoints per workspace.
- [Idempotency](https://mailhaap.com/docs/idempotency): Send an Idempotency-Key header on any creating POST and a retry returns the original response instead of sending a second email.
- [Adding a domain](https://mailhaap.com/docs/domains): Add a domain, publish the records we generate, and verification starts polling automatically.
- [DNS health monitoring](https://mailhaap.com/docs/domain-health): Every verified domain is re-checked every six hours for the first week, then daily.
- [Campaign preflight](https://mailhaap.com/docs/campaign-preflight): Preflight runs before a campaign can be scheduled.
- [Open and click tracking](https://mailhaap.com/docs/tracking): Open tracking is far less reliable than the industry pretends.
- [SDKs](https://mailhaap.com/docs/sdks): All five SDKs are generated from the OpenAPI specification with hand-written ergonomics on top.
- [SMTP relay](https://mailhaap.com/docs/smtp-relay): Authenticate with your API key prefix as the username and the full key as the password.
- [API reference](https://mailhaap.com/docs/api-reference): Rendered from the published OpenAPI specification. Downloadable at /openapi.yaml.

## Templates

- [Template gallery](https://mailhaap.com/templates): 15 sectors, 90 free templates, each with light and dark variants, sample data, a suggested subject line and a plaintext part.
- Real estate: 6 templates — Listings, price changes and viewing invitations that survive Outlook.
- E-commerce: 6 templates — Order confirmations, shipping updates and sales that render everywhere.
- Hotel & travel: 6 templates — Bookings, pre-arrival details and post-stay follow-ups.
- Restaurant & café: 6 templates — Menus, reservations and event nights.
- Clinic & healthcare: 6 templates — Appointment reminders and aftercare, with tracking off by default.
- Education: 6 templates — Enrolment, schedules and certificates.
- SaaS & tech: 6 templates — Onboarding series, usage reports and incident notices.
- Automotive: 6 templates — Service reminders, new models and trade-in offers.
- Fitness & wellness: 6 templates — Class schedules, renewals and progress reports.
- Beauty & salon: 6 templates — Reminders, treatments and birthday offers.
- Legal & consulting: 6 templates — Regulatory updates, newsletters and engagement letters.
- Construction & trades: 6 templates — Project updates, quotes and portfolio showcases.
- Events: 6 templates — Save the dates, agendas and post-event surveys.
- Non-profit: 6 templates — Appeals, impact reports and donation receipts.
- Agency & freelance: 6 templates — Portfolios, proposals and monthly reports.

## Trust

- [Security](https://mailhaap.com/security): Four independent tenant-isolation layers, envelope encryption with per-workspace keys, crypto-shredding on deletion, no standing production access.
- [Privacy](https://mailhaap.com/legal/privacy): What we collect about you as our customer, what we process on your behalf as your processor, and how long each is kept.
- [Terms of service](https://mailhaap.com/legal/terms): What you agree to, what we commit to, and what gets an account terminated.
- [Data processing agreement](https://mailhaap.com/legal/dpa): The processor terms, the sub-processors, and the transfer mechanism.
- [Sub-processors](https://mailhaap.com/legal/sub-processors): Every third party that touches customer data, and what each one does.

## Machine-readable

- [Full documentation](https://mailhaap.com/llms-full.txt): every documentation page concatenated as plain markdown.
- [OpenAPI specification](https://mailhaap.com/openapi.yaml): the machine-readable API contract.
- Every documentation page is available as markdown at its own path plus `.md`.

## Key facts

- Three sending planes: mailbox, transactional, campaign. The plane is decided at accept time and never changes.
- Internal thresholds: flag at 2% bounce, throttle at 3%, pause the plane at 4%. Providers begin review around 5%.
- Open tracking is reported as three numbers — total, estimated human, machine/proxy — because Apple Mail Privacy Protection makes roughly half of consumer opens machine opens.
- Geolocation uses a local database file, never a per-request API, so no recipient IP is transmitted to a third party.
- Dedicated IPs are offered only above 250,000 messages/month, because below that a dedicated IP performs worse than a shared pool.