Privacy Notice
OhMySMTP Ltd is a company incorporated in England and Wales (company number 13200428).
What data we need
The personal data we collect from you includes:
- Your email address
- Your Internet Protocol (IP) address, and details of which version of web browser you used
- Information on how you use the site, using HTTP logs and necessary session cookies
We also process emails sent through our API. These emails are sent through our SMTP server and stored for you to access them for up to 30 days.
The legal basis for processing this data is to provide the transactional email services offered by MailPace.com.
Why we need it
We collect your email address to allow us to provide a login service and to send important account notifications, such as plan upgrades and support services.
We also collect data in order to:
- Gather feedback to improve our services
- Respond to any feedback / support requests you send us
- Contact you with product updates and information regarding our services through our mailing list
What we do with your data
The data we collect is only used to run this service.
We will not:
- Sell or rent your data to third parties
- Share your data with third parties for marketing purposes
We will share your data if we are required to do so by law – for example, by court order
How long we keep your data
We will only retain your personal data for as long as:
- It is needed for the purposes set out in this document
- The law requires us to
How we protect your data and keep it secure
We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data – for example, we protect your data using varying levels of encryption.
Your rights
You have the right to request:
- Information about how your personal data is processed
- A copy of that personal data
- That anything inaccurate in your personal data is corrected immediately
You can also:
- Raise an objection about how your personal data is processed
- Request that your personal data is erased if there is no longer a justification for it
- Ask that the processing of your personal data is restricted in certain circumstances
If you have any of these requests, contact our support team here
List of Sub-Processors
We share certain information to operate our service with companies that may be considered our "sub-processors" under GDPR. These sub-processors are:
| Company | Purpose | Details |
|---|---|---|
| Freethought | Infrastructure Hosting | Freethought are a UK based ethical web hosting company |
| Tebi | Off-site backups | Backups are stored for up to seven days in two locations in Germany |
| AppSignal | Error & Performance Monitoring | Based in Amsterdam |
| Paddle | Merchant of Record | Paddle are a global reseller of our software, and help ensure we are fully tax compliant globally, based in the UK |
| Tutanota | Support email | A secure email service based in Germany |
| Plausible.io | Analytics | EU-hosted privacy friendly analytics |
| Clever Cloud | Infrastructure Hosting | EU-hosted web application servers and databases |
Changes to this policy
We may change this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.
If these changes affect how your personal data is processed, we will take reasonable steps to let you know.
Last Updated: December 12th 2023