Privacy Policy

1. Introduction

Postscale is a transactional email infrastructure service operated by DNScale OÜ (registry code: 16776331), located at Harju maakond, Tallinn, Lasnamäe linnaosa, Sepapaja tn 6, 15551, Estonia ("we", "us", "our").

We are committed to protecting your privacy and handling your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Estonian and EU data protection laws. This Privacy Policy explains how we collect, use, store, and protect your information when you use our services.

2. Information We Collect

2.1 Personal Information

• Name and contact information (email address)
• Account credentials (email and authentication tokens)
• Billing and payment information
• Company information for business accounts

2.2 Technical Information

• Email content and metadata processed through our API (sender, recipient, subject, headers)
• IP addresses and network information
• API usage logs and performance metrics
• Device and browser information

3. Legal Basis for Processing

We process your personal data under the following legal bases as defined by the GDPR:

• Contract: Processing necessary to provide our email infrastructure services to you
• Legitimate Interest: Processing necessary for service improvement, security, and fraud prevention
• Consent: Processing based on your explicit consent, such as marketing communications
• Legal Obligation: Processing required to comply with applicable laws and regulations

4. How We Use Your Information

• Provide and operate our transactional email, inbound processing, and masked email services
• Process payments and manage billing
• Send service-related communications (delivery notifications, account updates)
• Provide customer support
• Analyze usage patterns to improve our services
• Prevent abuse, spam, and unauthorized use of our platform
• Comply with legal obligations

5. Data Sharing and Disclosure

We do not sell your personal data. We may share your information only in the following circumstances:

• Service Providers: Third-party providers who assist in operating our services (payment processing, infrastructure hosting)
• Legal Requirements: When required by law, court order, or governmental authority
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• With Your Consent: When you have given explicit consent for specific sharing

6. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy. Specifically:

• Account information is retained for the duration of your account and up to 7 years afterward for tax and legal compliance purposes
• Email content processed through our API is retained according to your plan's retention policy and deleted thereafter
• Usage logs and analytics data are retained for up to 24 months

7. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of your personal data
• Right to Restrict Processing: Request limitation of processing of your personal data
• Right to Data Portability: Receive your personal data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw previously given consent at any time

To exercise any of these rights, please contact us at info@postscale.io. We will respond to your request within 30 days.

8. International Data Transfers

Our primary infrastructure is hosted within the European Union. When data transfers outside the EU/EEA are necessary, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission and reliance on adequacy decisions where applicable.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption in transit and at rest, access controls, and regular security assessments.

10. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data protection rights, please contact us:

DNScale OÜ
Harju maakond, Tallinn, Lasnamäe linnaosa
Sepapaja tn 6, 15551, Estonia
Email: info@postscale.io