Privacy policy

This policy explains what personal data emailservicesolutions collects, why, and how long we keep it. For data we process on your behalf, such as lists you upload for validation, the Data Processing Addendum also applies.

What we collect

• Account data: name, email address, password hash, time zone, two-factor settings, and the terms version you accepted.
• Billing data: invoices, payment status and the coin and transaction details our payment processor reports. We never see a card number, because we do not take cards.
• Server and domain data: the servers, domains, DNS provider and cloud accounts you connect, the facts we read from a server during checks (system, ports, IP addresses), and job logs. Credentials you give us are stored encrypted.
• Lists and test data you submit: addresses you upload for validation, SMTP test transcripts, and messages you send to your test inbox.
• Delivery statistics: aggregate counts from your PowerMTA logs. We do not store recipient addresses from those logs and we discard the raw lines.
• Security and usage data: sign-in history, device information for sessions, IP addresses used for rate limiting and fraud prevention, and an audit log of actions on your account.
• Support and abuse reports: what you send us and what reporters send us.

What we do not collect

We do not receive your outgoing mail, we do not track you across other websites, and we do not use advertising cookies.

Free tools on this website

The free tools process the target you enter in order to run the check, and keep the IP address you connect from for an hour to apply the rate limit. We do not store the target or the result.

Why we use your data

To provide and secure the service, to bill you, to prevent abuse, to meet legal obligations, and to communicate with you about your account. Where the law requires a legal basis: contract (providing the service), legitimate interests (security, abuse prevention, improving the service) and legal obligation (accounting, responding to authorities). We use consent for optional analytics.

How we install software on your servers

We log in with the credentials you give us, run our own scripts in a temporary folder with a random name, download the licensed package from our servers, install and configure PowerMTA, and delete the temporary folder and the installer files when we finish or fail. What stays is the PowerMTA installation itself, listed in the install manifest. We never keep a persistent agent, scheduled job or callback on your server.

How long we keep data

These are the default periods; some depend on your plan.

| Data | Kept | |---|---| | Uploaded lists and validation results | Up to 30 days, or your plan's retention setting | | Raw test inbox messages | 7 days | | Terminal session recordings | 90 days | | Job logs | 90 days (install logs while the server exists) | | Monitor runs | 90 days, with summaries for 2 years | | Audit log | 2 years | | Invoices | As the law requires |

When you delete your account we erase your data except what we must keep by law.

Analytics and cookies

This website sets no advertising cookies. If analytics are enabled, we use privacy-friendly analytics only after you accept, and you can change your choice from the footer. The captcha on the free tools is provided by Cloudflare and is needed to keep them safe from abuse.

Who we share data with

Providers that help us run the service, listed on the subprocessors page, and authorities when the law requires it. We do not sell personal data.

Your rights

Depending on where you live you may have the right to access, correct, export or delete your data, to object to some processing and to complain to your data protection authority. You can export and delete your data from your account settings, or write to privacy@example-brand.com.

Security

Credentials are encrypted, access to them is limited and logged, and our systems are designed so that stored secrets are decrypted only where a task needs them. No system is perfectly secure; if there is a breach that affects you we will tell you without undue delay.

International transfers, children and changes

[International transfer mechanisms to be confirmed by counsel.] The service is not for people under 18. We will tell you before a material change to this policy applies.

Contact