§ 03 · Email Communications
Transparency
How and why Baalvion sends email.
Baalvion sends transactional email — messages triggered by your own actions and required to operate your account securely. We do not send unsolicited bulk email, and we do not send spam.
Why email matters here
Authentication on Baalvion is passwordless. Instead of storing passwords, we verify identity with one-time codes sent to your email. That makes timely, reliable email delivery a security-critical part of the service: a delayed or undelivered code means a user cannot sign in or recover access.
Every message below is generated in direct response to a user action or a security event on an account the recipient owns. Recipients are people who have created a Baalvion account using their own, permanent email address.
The email we send
Every message is transactional — generated in response to your own action or a security event on your account.
Account verification
When you register or add an email
A one-time code that confirms you control the email address before an account is activated.
OTP / sign-in codes
Every time you sign in
A short-lived numeric code used in place of a password to authenticate the sign-in attempt.
Account recovery
When you request access recovery
A secure code to regain access to your account. Because there are no passwords, recovery is performed entirely by email.
Security alerts
On notable security events
Notice of a new sign-in, a sign-in from an unrecognised device, or a change to your account’s security settings.
Login notifications
On successful sign-in
Confirmation that your account was accessed, so unexpected activity is visible to you immediately.
Transaction confirmations
On account or platform transactions
Receipts and confirmations for actions you take on Baalvion platforms — orders, payments, and settlement events.
Service notifications
On essential service changes
Operational notices that affect your account: policy updates, maintenance that impacts access, or required actions.
The user journey, end to end
From registration to recovery, here is exactly where email enters the experience — and why each message is necessary.
Register
✉ Verification code
You create an account with your name and a permanent email address. We email a one-time code to confirm the address.
Verify email
✉ Confirmation
You enter the code. The address is verified and your account is activated — no password is ever set or stored.
Sign in
✉ Sign-in code + login notice
On each sign-in we email a one-time code. After you authenticate, a login notification confirms the access.
Operate
✉ Transaction & service notices
As you use Baalvion platforms, you receive receipts, confirmations, and essential service notifications.
Stay secure
✉ Security alerts
If we detect a new device or a sensitive change, we email a security alert so you can act immediately.
Recover access
✉ Recovery code
Lost access? Because login is passwordless, you simply request a fresh code by email to get back in.
Our commitments
Responsible sending, by policy.
- We send transactional email only — triggered by the recipient’s own actions or by security events on their account.
- We never send unsolicited bulk email, purchased lists, or spam.
- Recipients always use their own, permanent email address; disposable inboxes are rejected at registration.
- We honour bounces and complaints, suppress addresses that hard-bounce, and monitor our sender reputation.
- Any optional (non-essential) communications, if offered, are strictly opt-in and include a one-click unsubscribe.
- Email is delivered through Amazon SES and other reputable providers, with SPF, DKIM, and DMARC alignment on the sending domain.
Create an account to see the flow first-hand, or read how we protect your data.