Legal information
Privacy Policy
This draft explains how the service handles personal data when you use MailConfig Pro. The operator identified below is the controller for its account and service operations, subject to legal review.
Draft, pending legal review
Operator details to complete
[OPERATOR: legal entity name, registered address, registration number]
Information we process
We process account details such as name, work email, authentication and organization membership; domain names and DNS records; DMARC aggregate reports and their sending-IP addresses, message counts and authentication results; DNS provider credentials; audit logs of account and configuration actions; exports; and AI prompts, outputs and usage records. If you configure BYOK, we store your provider key encrypted at rest.
Cookies and similar storage
The application uses session and CSRF cookies for authentication and request protection. It does not use advertising or analytics cookies.
Purposes and legal bases
We use this information to provide and secure the service, operate integrations, support customers, meet accounting and legal duties, prevent abuse and improve reliability. The final legal bases and any local-law wording require operator review.
Storage and security
The production application is hosted on a self-hosted EU virtual machine. Configured backups are encrypted before being copied to AWS S3 in eu-central-1; backup retention is configured separately. DNS provider credentials and stored AI keys are encrypted at rest. Audit events record actions and avoid storing secrets.
Retention
Organization retention follows the active plan configuration and may be changed by the operator. Seeded defaults are: Free — raw reports 30 days, analytics 90 days, exports 7 days, audit logs 90 days; Business — 180 days, 730 days, 30 days and 365 days; Enterprise — 730 days, 1,825 days, 90 days and 2,555 days respectively. Active configuration can differ. Backups have a separate default retention of 30 days.
Recipients and subprocessors
We use Paddle as merchant of record and reseller for payments; AWS S3 for configured encrypted off-site backups; the AI provider you select when using BYOK; and our platform AI provider when you select managed AI. The provider you choose for BYOK receives the data needed to answer your request under your own provider account.
Your choices and requests
You can manage account and organization access, connected provider credentials and AI settings in the product. Contact the operator below to ask about access, correction, deletion or other privacy rights. Requests are subject to applicable law and legitimate retention requirements.
Operator and contact
Operator: