Privacy Policy

How we collect, use, and protect your information

Last Updated: October 8, 2026

Your Privacy Matters: At SMTPS.IO, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email delivery services.

1. Introduction

SMTPS.IO ("Company," "we," "us," or "our") operates the SMTPS.IO email delivery service, including our website, APIs, and related services (collectively, the "Service"). This Privacy Policy applies to all information collected through our Service.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our Service:

Category Examples
Account Information Name, email address, company name, phone number, billing address, and the date and version of the Terms you accepted
Payment Information Card brand, last four digits and expiry date, plus billing information. Full card details are entered on our payment processor's secure checkout page and are never stored on our servers. Cryptocurrency payments are identified by the transaction ID you provide
Email Content Email messages, attachments, sender/recipient addresses transmitted through our Service. Bodies and attachments are relayed without being stored; the subject line, addresses and delivery status are recorded in the delivery log
Lists and Templates Recipient lists you upload (email addresses and any other fields you include) and email templates you save in your dashboard
Support Communications Messages, feedback, and correspondence with our support team, including messages sent through our contact form
Domain Information Domain names you configure, DNS records, authentication settings

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

  • Log Data: IP addresses, browser type, operating system, referring URLs, pages viewed, access times
  • Email Metadata: Delivery timestamps, message IDs, envelope information, delivery status
  • Usage Data: API calls, email volumes, feature usage, error logs
  • Device Information: Device identifiers, hardware model, operating system version
  • Performance Data: Response times, delivery rates, bounce rates

2.3 Information from Third Parties

We may receive information about you from:

  • Payment processors when you make purchases
  • Analytics providers
  • Email feedback loops and abuse reports from ISPs
  • Public databases for fraud prevention

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

  • Process and deliver emails through our infrastructure
  • Authenticate your identity and authorize access
  • Provide customer support and respond to inquiries
  • Process payments and manage billing
  • Send transactional notifications about your account

3.2 Service Improvement

  • Analyze usage patterns to improve our Service
  • Develop new features and functionality
  • Monitor and optimize email delivery performance
  • Conduct research and analytics

3.3 Security and Compliance

  • Detect and prevent fraud, abuse, and security incidents
  • Enforce our Terms of Service and Acceptable Use Policy
  • Comply with legal obligations and respond to legal requests
  • Protect the rights and safety of our users and third parties

3.4 Communication

  • Send important service announcements and updates
  • Provide technical alerts and security notifications
  • Send marketing communications (with your consent)
  • Respond to your requests and feedback

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

Legal Basis Processing Activities
Contract Performance Providing the Service, processing payments, account management
Legitimate Interests Service improvement, security, fraud prevention, analytics
Consent Marketing communications, optional cookies
Legal Obligation Compliance with laws, responding to legal requests

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

  • Cloud Infrastructure: Hosting and data storage providers
  • Payment Processors: Secure payment processing
  • Analytics Services: Usage analysis and reporting
  • Customer Support: Help desk and support tools
  • Email Infrastructure: Delivery partners and ISPs

All service providers are contractually bound to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders, subpoenas, or legal process
  • Government or regulatory requests
  • Law enforcement investigations
  • Protection of our legal rights

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

5.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

6. Data Security

We use reasonable technical and organizational measures to protect your information:

Security Measures: We use encryption in transit, firewalled servers in Microsoft Azure data centers, and restricted administrative access to protect your data.

6.1 Technical Safeguards

  • Encryption in transit: Our website, dashboard, and API use HTTPS with TLS 1.2 or later. Our SMTP servers support STARTTLS encryption, and port 587 requires it
  • Access Controls: Customer and administrator accounts have separate roles, and access to production systems is limited to authorized administrators
  • Network Security: Firewalls restrict access to our servers, which are hosted in Microsoft Azure data centers in the United States
  • Monitoring: We monitor service health, delivery errors, and abuse signals

6.2 Organizational Measures

  • Data minimization: we do not store email bodies or attachments, and detailed delivery logs stay in our live systems for 30 days
  • Access to personal information only where needed to operate, support, or protect the Service
  • Investigation of security incidents, and notification of affected users where required by law

6.3 Your Responsibilities

You are responsible for:

  • Maintaining the security of your account credentials
  • Keeping your API keys confidential
  • Notifying us immediately of any security breach
  • Ensuring your systems meet security requirements

7. Cookies and Tracking Technologies

We do not set advertising cookies and we do not run personalised advertising. Our own site does not set cookies at all: your sign-in token and language preference are held in your browser's local storage, which stays on your device and is cleared when you sign out or clear your browsing data.

The third-party services we embed do set their own cookies:

7.1 Cookies Set by Third Parties

Service Purpose Where
Google Analytics Usage statistics and performance monitoring (typically retained up to 2 years) All public pages
Zendesk Support chat widget All public pages
Google reCAPTCHA Spam and abuse protection on the contact form Contact page
Stripe Payment processing and fraud prevention Checkout

Videos are embedded through youtube-nocookie.com, YouTube's privacy-enhanced mode, so YouTube does not set tracking cookies unless you play the video.

7.2 Managing Cookies

You can control cookies through:

  • Browser settings to block or delete cookies
  • Opt-out tools offered by analytics providers, such as the Google Analytics opt-out browser add-on

Note that disabling certain cookies may affect the functionality of our Service.

8. Data Retention

We retain your information for as long as your account exists and for as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with our legal obligations, and to resolve disputes. Apart from the delivery-log and server-log periods below, we do not run an automatic deletion schedule, so records are kept until you ask us to remove them or we no longer need them:

Data Type Retention
Account Information Kept for the life of the account, and until you ask us to delete it
Email Bodies and Attachments Not stored — relayed to the destination and not written to our systems
Email Metadata/Logs Kept in our live systems for 30 days, then moved to a compressed offline archive that we keep for billing, abuse-prevention, and dispute purposes. Each delivery record includes the sender and recipient addresses, the subject line, timestamps, message size and delivery status
Billing Records Kept for the life of the account, and as required by tax and accounting law
Lists and Templates Kept until you delete them or close your account
Unsubscribe, Complaint and Invalid-Address Records Kept for the life of the account, so that opt-outs continue to be honored and to protect deliverability
Support Communications Kept for the life of the account
Security and Application Logs Kept for a limited period (web server logs for 14 days), unless we need them longer to investigate a security incident or abuse

You can ask us to delete your data at any time — see Your Privacy Rights below. We will delete or anonymise it except where we are required to keep it, for example for tax, accounting or fraud-prevention purposes.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 Rights for All Users

All Users
  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your account and data
  • Data Export: Request a copy of your data in a portable format
  • Marketing Opt-out: Unsubscribe from marketing communications

9.2 Additional GDPR Rights (EEA Users)

GDPR
  • Restriction: Request restriction of processing
  • Objection: Object to processing based on legitimate interests
  • Portability: Receive data in a machine-readable format
  • Withdraw Consent: Withdraw consent at any time
  • Lodge Complaint: File a complaint with your supervisory authority

9.3 CCPA Rights (California Residents)

CCPA
  • Know: Know what personal information is collected and how it's used
  • Delete: Request deletion of personal information
  • Opt-out: Opt-out of the sale of personal information (we do not sell data)
  • Non-Discrimination: Not be discriminated against for exercising rights

9.4 Exercising Your Rights

To exercise your privacy rights, you can:

We will respond to verified requests within 30 days (or as required by applicable law).

10. International Data Transfers

SMTPS.IO's servers are hosted in Microsoft Azure data centers in the United States. If you use the Service from outside the United States, your information will be transferred to and processed in the United States. Messages you send are also handed to the email delivery partners that relay them, which may be located in other countries.

Where the law requires safeguards for these transfers, we rely on our service providers' data processing agreements, including the European Commission's Standard Contractual Clauses where they apply.

11. Children's Privacy

Our Service is intended only for users who are at least 18 years old and is not directed to children. We do not knowingly collect personal information from children under 16. If we learn we have collected information from a child under 16, we will delete it promptly.

If you believe we have collected information from a child, please contact us immediately at support@smtps.io.

12. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

Third-party services we integrate with include:

  • Payment processing (Stripe)
  • Analytics and spam protection (Google Analytics, Google reCAPTCHA)
  • Customer support chat (Zendesk)
  • Cloud hosting (Microsoft Azure)
  • Email delivery partners that relay your messages

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on this page and update the "Last Updated" date. For significant changes, we may also notify you by email or with a notice in your account dashboard.

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

SMTPS.IO
Email: support@smtps.io
Florida, United States

This address also handles GDPR-related requests.


By using SMTPS.IO, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein.