Privacy policy

Data we handle

We collect your account email, account settings and credentials needed to operate the service. We process recipient addresses, subjects, sending metadata and delivery events; message metadata and logs are retained for 30 days. Account and billing records have separate retention requirements.

We process inbound bodies and attachments only while queued before delivery completes: at most 24 hours for Webhooks and 3 days for forwarding. We retain inbound metadata for 30 days, and process forwarding addresses and their confirmation records.

Tracking and webhooks

Open and click tracking can be switched on or off for each domain and stream. Tracking records message opens and clicked destinations. Webhooks send selected delivery or tracking events to endpoints you configure; protect those endpoints and their signing secrets.

Use of data

We use data to deliver mail, operate accounts, bill for accepted recipients and prevent abuse. We do not sell your data. Recipient mail providers and configured webhook receivers receive the data needed for delivery and event handling.

Legal bases

We process account, sending and billing data to perform our contract with you, use logs and tracking data to prevent abuse and keep the service secure based on our legitimate interests, and keep billing records to meet legal obligations.

Service providers

Our sending and application servers run at Hetzner. Our database runs on a separate hosted server. RBL / SURBL checks send sender IP addresses and domains from message links as DNS queries to Spamhaus and other list services. We do not use third-party content-hash services.

Retention

Message metadata and logs, including inbound metadata, are kept for 30 days. Daily database backups are kept for 14 days, so deleted data can remain in backups for up to 14 days.

Contact and requests

You can ask to access, correct, delete or export your data, or object to its processing. Write to us from your account email and we will reply within 30 days. You can also complain to the data protection authority where you live.

Contact: postmaster@fays.si