Command Mail privacy & data

Command Mail (commandmail.app) is operated by FYN Labs LLC, the controller within the meaning of the GDPR:

Account data: name, email address, sign-in method, password hash if you set a password, settings such as language and theme.

Billing data: if you choose a paid plan, your Stripe customer and subscription identifiers, your plan and the subscription status (see section 7).

Mail data: messages that reach your connected addresses, their headers and attachments, messages you write and send, drafts, labels, folders and read state.

Technical data: IP address, time, requested page and browser type in short-lived server logs, needed to deliver and secure the service.

Providing the service you signed up for: storing, showing, sorting, drafting and sending your mail (Art. 6(1)(b) GDPR).

Protecting you from spam, fraud and phishing through automated assessment of incoming mail (Art. 6(1)(b) and (f) GDPR).

Measuring visits and page performance and attributing new sign-ups to a source or campaign, only with your consent (Art. 6(1)(a) GDPR; § 25(1) TDDDG).

We automatically delete inquiry details, including those from earlier applications, 90 days after submission.

When you delete your account or ask us to, we delete your account data, mail and attachments within 30 days, except where the law requires us to keep something longer.

The daily counts are deleted after 13 months.

those fields are associated with that account for up to 90 days

Attachments are stored in Cloudflare's EU jurisdiction.

Transfers rely on the EU-US Data Privacy Framework where the recipient is certified

otherwise on the European Commission's standard contractual clauses

We use the following processors, bound by data processing terms:

You can withdraw your inquiry or request erasure at privacy@fyn-labs.com.

You have the right to access, rectification, erasure, restriction of processing, data portability and to object to processing based on legitimate interests.

You also have the right to lodge a complaint with a data protection supervisory authority.

We do not sell your personal data