Privacy Policy

How we collect, use, and protect your information

Last Updated: August 6, 2026

Your Privacy Matters: At SMTPS.IO, we are committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our email delivery services.

1. Introduction

SMTPS.IO ("Company," "we," "us," or "our") operates the SMTPS.IO email delivery service, including our website, APIs, and related services (collectively, the "Service"). This Privacy Policy applies to all information collected through our Service.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with our policies and practices, please do not use our Service.

2. Information We Collect

2.1 Information You Provide

We collect information you voluntarily provide when using our Service:

Category Examples
Account Information Name, email address, company name, phone number, billing address
Payment Information Card brand, last four digits and expiry date, plus billing information. Full card details are entered on our payment processor's secure checkout page and are never stored on our servers. Cryptocurrency payments are identified by the transaction ID you provide
Email Content Email messages, attachments, sender/recipient addresses transmitted through our Service. Bodies and attachments are relayed without being stored; the subject line, addresses and delivery status are recorded in the delivery log
Support Communications Messages, feedback, and correspondence with our support team
Domain Information Domain names you configure, DNS records, authentication settings

2.2 Information Collected Automatically

When you use our Service, we automatically collect certain information:

  • Log Data: IP addresses, browser type, operating system, referring URLs, pages viewed, access times
  • Email Metadata: Delivery timestamps, message IDs, envelope information, delivery status
  • Usage Data: API calls, email volumes, feature usage, error logs
  • Device Information: Device identifiers, hardware model, operating system version
  • Performance Data: Response times, delivery rates, bounce rates

2.3 Information from Third Parties

We may receive information about you from:

  • Payment processors when you make purchases
  • Analytics providers
  • Email feedback loops and abuse reports from ISPs
  • Public databases for fraud prevention

3. How We Use Your Information

We use the information we collect for the following purposes:

3.1 Service Delivery

  • Process and deliver emails through our infrastructure
  • Authenticate your identity and authorize access
  • Provide customer support and respond to inquiries
  • Process payments and manage billing
  • Send transactional notifications about your account

3.2 Service Improvement

  • Analyze usage patterns to improve our Service
  • Develop new features and functionality
  • Monitor and optimize email delivery performance
  • Conduct research and analytics

3.3 Security and Compliance

  • Detect and prevent fraud, abuse, and security incidents
  • Enforce our Terms of Service and Acceptable Use Policy
  • Comply with legal obligations and respond to legal requests
  • Protect the rights and safety of our users and third parties

3.4 Communication

  • Send important service announcements and updates
  • Provide technical alerts and security notifications
  • Send marketing communications (with your consent)
  • Respond to your requests and feedback

For users in the European Economic Area (EEA), we process your personal data based on the following legal grounds:

Legal Basis Processing Activities
Contract Performance Providing the Service, processing payments, account management
Legitimate Interests Service improvement, security, fraud prevention, analytics
Consent Marketing communications, optional cookies
Legal Obligation Compliance with laws, responding to legal requests

5. Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

  • Cloud Infrastructure: Hosting and data storage providers
  • Payment Processors: Secure payment processing
  • Analytics Services: Usage analysis and reporting
  • Customer Support: Help desk and support tools
  • Email Infrastructure: Delivery partners and ISPs

All service providers are contractually bound to protect your information and use it only for the purposes we specify.

5.2 Legal Requirements

We may disclose your information if required by law or in response to:

  • Court orders, subpoenas, or legal process
  • Government or regulatory requests
  • Law enforcement investigations
  • Protection of our legal rights

5.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction. We will notify you of any such change.

5.4 With Your Consent

We may share your information with third parties when you have given us explicit consent to do so.

6. Data Security

We implement comprehensive security measures to protect your information:

Security Measures: We use industry-standard encryption, secure data centers, regular security audits, and strict access controls to protect your data.

6.1 Technical Safeguards

  • Encryption: TLS 1.2+ for data in transit, AES-256 for data at rest
  • Access Controls: Role-based access, multi-factor authentication
  • Network Security: Firewalls, intrusion detection, DDoS protection
  • Monitoring: 24/7 security monitoring and alerting

6.2 Organizational Measures

  • Employee security training and background checks
  • Regular security assessments and penetration testing
  • Incident response procedures
  • Data minimization practices

6.3 Your Responsibilities

You are responsible for:

  • Maintaining the security of your account credentials
  • Keeping your API keys confidential
  • Notifying us immediately of any security breach
  • Ensuring your systems meet security requirements

7. Cookies and Tracking Technologies

We do not set advertising cookies and we do not run personalised advertising. Our own site does not set cookies at all: your sign-in token and language preference are held in your browser's local storage, which stays on your device and is cleared when you sign out or clear your browsing data.

The third-party services we embed do set their own cookies:

7.1 Cookies Set by Third Parties

Service Purpose Where
Google Analytics Usage statistics and performance monitoring (typically retained up to 2 years) All public pages
Zendesk Support chat widget All public pages
Google reCAPTCHA Spam and abuse protection on the contact form Contact page
Stripe Payment processing and fraud prevention Checkout

Videos are embedded through youtube-nocookie.com, YouTube's privacy-enhanced mode, so YouTube does not set tracking cookies unless you play the video.

7.2 Managing Cookies

You can control cookies through:

  • Browser settings to block or delete cookies
  • Our cookie consent banner preferences
  • Opt-out links for analytics services

Note that disabling certain cookies may affect the functionality of our Service.

8. Data Retention

We retain your information for as long as your account exists and for as long as necessary to fulfill the purposes described in this Privacy Policy, to comply with our legal obligations, and to resolve disputes. We do not currently run an automatic deletion schedule, so the records below are kept until you ask us to remove them or we no longer need them:

Data Type Retention
Account Information Kept for the life of the account, and until you ask us to delete it
Email Bodies and Attachments Not stored — relayed to the destination and not written to our systems
Email Metadata/Logs Kept for the life of the account. Each delivery record includes the sender and recipient addresses, the subject line, timestamps, message size and delivery status
Billing Records Kept for the life of the account, and as required by tax and accounting law
Support Communications Kept for the life of the account
Security and Application Logs Kept for the life of the account

You can ask us to delete your data at any time — see Your Privacy Rights below. We will delete or anonymise it except where we are required to keep it, for example for tax, accounting or fraud-prevention purposes.

9. Your Privacy Rights

Depending on your location, you may have the following rights regarding your personal information:

9.1 Rights for All Users

All Users
  • Access: Request a copy of your personal information
  • Correction: Request correction of inaccurate information
  • Deletion: Request deletion of your account and data
  • Data Export: Download your data in a portable format
  • Marketing Opt-out: Unsubscribe from marketing communications

9.2 Additional GDPR Rights (EEA Users)

GDPR
  • Restriction: Request restriction of processing
  • Objection: Object to processing based on legitimate interests
  • Portability: Receive data in a machine-readable format
  • Withdraw Consent: Withdraw consent at any time
  • Lodge Complaint: File a complaint with your supervisory authority

9.3 CCPA Rights (California Residents)

CCPA
  • Know: Know what personal information is collected and how it's used
  • Delete: Request deletion of personal information
  • Opt-out: Opt-out of the sale of personal information (we do not sell data)
  • Non-Discrimination: Not be discriminated against for exercising rights

9.4 Exercising Your Rights

To exercise your privacy rights, you can:

  • Use the privacy settings in your account dashboard
  • Email us at info@smtps.io
  • Submit a request through our contact form

We will respond to verified requests within 30 days (or as required by applicable law).

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place:

  • Standard Contractual Clauses: EU-approved data transfer agreements
  • Data Processing Agreements: Contracts with service providers
  • Privacy Shield: Compliance with applicable frameworks (where available)
  • Adequacy Decisions: Transfers to countries with adequate protection

11. Children's Privacy

Our Service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16. If we learn we have collected information from a child under 16, we will delete it promptly.

If you believe we have collected information from a child, please contact us immediately at info@smtps.io.

12. Third-Party Links and Services

Our Service may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any information.

Third-party services we integrate with include:

  • Payment processors (Stripe, PayPal)
  • Analytics services (Google Analytics)
  • Customer support platforms
  • Cloud infrastructure providers

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

  • Posting the updated policy on our website
  • Updating the "Last Updated" date
  • Sending an email notification for significant changes
  • Displaying a notice in your account dashboard

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes become effective constitutes your acceptance of the revised policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

SMTPS.IO - Privacy Team
Email: support@smtps.io
Tampa, FL 33601, United States

Data Protection Officer

For GDPR-related inquiries, you may also contact our Data Protection Officer:

EU Representative

For users in the European Union, our EU representative can be contacted at:


By using SMTPS.IO, you acknowledge that you have read and understood this Privacy Policy and agree to our collection, use, and disclosure of your information as described herein.