Privacy Policy

This policy explains what personal data we collect when you visit this website or use MailBench SMTP (the "Service"), why, and what rights you have. We have written it to be read, so please do.

1. Who we are

MailBench SMTP is provided by MailBench SMTP, House 613, Road 9, Mirpur DOHS, Dhaka 1216, Bangladesh. For questions about privacy, email hello@ivivelabs.com.

2. When we are controller, and when we are processor

• We are the controller of the data about you as our customer: your account, workspace, billing relationship, support requests, usage and logs.
• You are the controller, and we are your processor, for any personal data inside the test emails your applications send to the Service (for example names and addresses in a message). We process it only to provide the Service to you and on your instructions. A Data Processing Agreement is available on request athello@ivivelabs.com.

If you are a person named in an email that one of our customers sent to the Service, please contact that customer first. We will help them respond to you.

3. What we collect

• Account data: your email address and, if you give it, your name.
• Workspace and team data: workspace and project names, inboxes, the members you invite and their email addresses and roles, and your settings, API keys and webhook URLs.
• Test email content: the messages your applications send to the Service, including headers, body, links and attachments, and any personal data they contain.
• Usage counts: how many emails, API requests and webhooks you use, to apply plan limits.
• Logs: technical records such as IP address, browser or client type, time and request details, created when you use the dashboard, API or SMTP server.
• Billing data: Paddle collects your payment details and billing address as merchant of record. We receive your plan, subscription status, country and the transaction details Paddle shares with us. We never receive your full card number.
• Support: what you tell us when you email us.

This website does not use analytics, advertising or tracking tools.

4. Why we use it, and our legal bases

We do not sell personal data, use it for advertising, or use the content of your test emails for any purpose other than providing the Service to you. We do not send marketing email unless you have agreed to it.

5. How long we keep it

• Captured test emails: 7 days on the Free plan, 30 days on Pro and 90 days on Team, then deleted automatically. If you change plan, the new plan's retention applies.
• Logs: 7 days.
• Account, workspace and usage data: while your account is open.
• When you delete your account: you have 30 days to ask for an export, then we delete your account and workspace data. Deleted data can remain in encrypted backups for up to3 days before it is overwritten.
• Records we must keep by law, such as records of transactions, are kept for as long as the law requires. Paddle keeps its own billing records as merchant of record.

6. Sub-processors and who we share data with

We use these service providers to run the Service. Each may process personal data only on our instructions.

Paddle is the merchant of record for our sales and acts as an independent controller of the billing data it collects. Its privacy policy explains how it uses that data. We may also disclose data if the law requires it, or to a buyer as part of a merger or sale of our business, in which case this policy will continue to protect it. We will tell customers before adding or replacing a sub-processor that handles test email content.

7. Cookies

This website sets no cookies. The checkout page loads Paddle's checkout, which may use cookies or similar storage that are needed to take your payment securely; Paddle's privacy policy covers them.

The dashboard uses a single session cookie to keep you signed in. It is strictly necessary, so it does not need consent. We use no advertising, analytics or tracking cookies.

8. International transfers

Customer data is hosted in Germany (EU). Some of our sub-processors may process data in other countries. Where personal data leaves the UK or the European Economic Area for a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum. Ask us for a copy at hello@ivivelabs.com.

9. Security

We protect data in transit with TLS on the website, dashboard, API and SMTP server, limit access to the people who need it, and delete test email on the retention schedule above. No system is perfectly secure, so please send us test data rather than real personal data whenever you can.

10. Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy;
• correct data that is wrong;
• have your data deleted;
• restrict or object to how we use it, including where we rely on legitimate interests;
• receive your data in a portable format; and
• withdraw consent, where we rely on consent.

To use any of these rights, email hello@ivivelabs.com from your account address. We may ask you to confirm your identity. We reply within one month. You have the right to complain to your local data protection authority.

11. Children

The Service is for businesses and developers and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you think a child has given us data, contact us and we will delete it.

12. Changes to this policy

We will post changes here and update the date at the top. If a change is significant, we will tell customers by email or in the dashboard before it takes effect.

13. Contact

MailBench SMTP, House 613, Road 9, Mirpur DOHS, Dhaka 1216, Bangladesh. Email hello@ivivelabs.com.