Privacy Policy

1. Information We Collect

Account data: Name, email address, company name (provided during registration).

Email metadata: Sender/recipient addresses, subject lines, timestamps, delivery status. We do not store email body content after delivery.

Usage data: API request logs, email volumes, feature usage for analytics and billing.

Payment data: Processed by Stripe. We do not store credit card numbers.

2. How We Use Your Data

• Provide and operate the email relay service
• Process payments and manage subscriptions
• Send service notifications (usage alerts, billing receipts)
• Improve service quality and deliverability
• Comply with legal obligations

3. Data Storage and Security

Data is stored in Hetzner Cloud (PostgreSQL on shared app_mailstack_os DB). API keys are SHA-256 hashed. All connections use TLS encryption. We conduct regular security reviews.

4. GDPR Compliance

We are GDPR-compliant. You have the right to access, rectify, erase, and export your personal data. To exercise these rights, email privacy@mailstack.io.

5. Data Sharing

We do not sell your data. We share data only with: Stripe (payments), Hetzner (database hosting), and as required by law.

6. Cookies

We use essential cookies for authentication. No third-party tracking cookies are used.

7. Data Retention

Account data: retained while your account is active + 30 days after deletion. Email metadata: 90 days. Analytics: 12 months. Payment records: 7 years (legal requirement).

8. Contact

Data Protection Officer: privacy@mailstack.io