Privacy Policy

Effective date: [to be set before launch]

1. Information We Collect

We may collect the following categories of information when you use DeviceSMTP:

• Account information — name, email address and password when you create an account.
• Device configuration data — SMTP credentials, hostnames and labels you associate with your devices.
• Message metadata — sender address, recipient address, timestamp, message size and delivery status for each email relayed. We do not store message body content beyond what is necessary for delivery and retry.
• Usage data — connection logs, delivery statistics and error reports used to operate and improve the service.
• Payment information — billing details processed by our payment provider. We do not store full card numbers on our systems.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate and maintain the DeviceSMTP relay service.
• Authenticate your devices and enforce per-device access controls.
• Detect and prevent abuse, spam relay and unauthorized use.
• Send you service-related communications such as delivery alerts, billing notices and security updates.
• Improve the reliability and performance of our infrastructure.
• Comply with legal obligations.

We do not sell your personal data to third parties.

3. Data Retention

We retain account data for as long as your account remains active. Message delivery logs are retained for a rolling period sufficient to support monitoring and troubleshooting (the specific retention window will be documented in the platform). You may request deletion of your data as described in Section 5.

[Template: specify exact retention periods before launch.]

4. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS) and at rest, access controls, and regular security reviews. No system is perfectly secure; in the event of a breach we will notify affected users as required by applicable law.

5. Your Rights

Depending on your jurisdiction you may have the right to access, correct, port or delete the personal data we hold about you, or to object to or restrict certain processing. To exercise any of these rights, please contact us via our contact page. We will respond within the timeframe required by law.

[Template: add jurisdiction-specific disclosures for GDPR, CCPA etc. before launch.]

6. Cookies and Tracking

We use essential cookies to operate the dashboard session and authentication. We may use analytics to understand aggregate usage patterns. [Template: list specific cookies and analytics providers before launch, and add a cookie consent mechanism where required.]

7. Third-Party Services

We use third-party providers for payment processing, infrastructure hosting and email delivery monitoring. These providers are bound by their own privacy policies and by data processing agreements where required. [Template: list all sub-processors before launch.]

8. Changes to This Policy

We may update this policy from time to time. When we do, we will update the effective date at the top of the page and, where changes are material, notify you by email or a notice in the dashboard.

9. Contact

Questions about this policy? Please reach us via our contact page.