MailCheap PigeonMailCheap
Back to home
Data Protection & GDPR

Privacy Policy

Strict compliance with the General Data Protection Regulation (EU 2016/679).

1. Privacy Commitment

At MailCheap, privacy protection for you and your subscribers is baked into our technical architecture. We do not sell personal data, we never embed third-party advertising trackers, and our systems operate on secure European cloud infrastructure.

2. Data Collected & Purpose

We process two distinct categories of data:

A. Account Owner Data:

Your email address (for passwordless OTP authentication), newsletter metadata, API keys, and campaign activity history. This data is necessary to provide the service contract.

B. Subscriber Data (as Data Processor):

Recipient email addresses, subscription status (active, unsubscribed, bounced), and aggregated delivery statistics (opens, clicks via signed cryptographic tokens). You remain the data controller; MailCheap acts exclusively as your technical data processor.

3. Suppression Lists & Unsubscribe Handling

To protect sender reputation and irrevocably honor subscriber consent, unsubscribed and hard-bounced addresses are stored in a cryptographically protected suppression list (SHA-256 with key salting). Once unsubscribed, an address can never be accidentally re-mailed.

4. Security & Cryptographic Safeguards

All server traffic is enforced with SSL/TLS encryption (automated Let's Encrypt certificates with HTTP Strict Transport Security). MongoDB databases are isolated at the network layer and unreachable from public routing. API keys and session secrets are generated with high-entropy cryptographic seeds.

5. Your GDPR Rights

Under GDPR, you retain the following rights regarding your data:

  • Right of access & export: Download your lists and data anytime in standard CSV format.
  • Right to rectification: Update contacts and settings directly from the dashboard.
  • Right to erasure ("Right to be Forgotten"): Delete your account and associated data permanently.
  • Right to restriction: Pause campaigns and email dispatch whenever desired.

6. Data Protection Officer Contact

For inquiries regarding data privacy or to exercise your GDPR rights, contact our Data Protection Officer at: newsletter@mailcheap.email.