Privacy Notice

OhMySMTP Ltd is a company incorporated in England and Wales (company number 13200428).

What data we need

The personal data we collect from you includes:

• Your email address
• Your Internet Protocol (IP) address, and details of which version of web browser you used
• Information on how you use the site, using HTTP logs and necessary session cookies

We also process emails sent through our API. These emails are sent through our SMTP server and stored for you to access them for up to 30 days.

The legal basis for processing this data is to provide the transactional email services offered by MailPace.com.

Why we need it

We collect your email address to allow us to provide a login service and to send important account notifications, such as plan upgrades and support services.

We also collect data in order to:

• Gather feedback to improve our services
• Respond to any feedback / support requests you send us
• Contact you with product updates and information regarding our services through our mailing list

What we do with your data

The data we collect is only used to run this service.

We will not:

• Sell or rent your data to third parties
• Share your data with third parties for marketing purposes

We will share your data if we are required to do so by law – for example, by court order

How long we keep your data

We will only retain your personal data for as long as:

• It is needed for the purposes set out in this document
• The law requires us to

How we protect your data and keep it secure

We are committed to doing all that we can to keep your data secure. We have set up systems and processes to prevent unauthorised access or disclosure of your data – for example, we protect your data using varying levels of encryption.

Your rights

You have the right to request:

• Information about how your personal data is processed
• A copy of that personal data
• That anything inaccurate in your personal data is corrected immediately

You can also:

• Raise an objection about how your personal data is processed
• Request that your personal data is erased if there is no longer a justification for it
• Ask that the processing of your personal data is restricted in certain circumstances

If you have any of these requests, contact our support team here

List of Sub-Processors

We share certain information to operate our service with companies that may be considered our "sub-processors" under GDPR. These sub-processors are:

Company	Purpose	Details
Freethought	Infrastructure Hosting	Freethought are a UK based ethical web hosting company
Tebi	Off-site backups	Backups are stored for up to seven days in two locations in Germany
AppSignal	Error & Performance Monitoring	Based in Amsterdam
Paddle	Merchant of Record	Paddle are a global reseller of our software, and help ensure we are fully tax compliant globally, based in the UK
Tutanota	Support email	A secure email service based in Germany
Plausible.io	Analytics	EU-hosted privacy friendly analytics
Clever Cloud	Infrastructure Hosting	EU-hosted web application servers and databases

Changes to this policy

We may change this privacy policy. In that case, the ‘last updated’ date at the bottom of this page will also change. Any changes to this privacy policy will apply to you and your data immediately.

If these changes affect how your personal data is processed, we will take reasonable steps to let you know.

Last Updated: December 12th 2023