> ## Documentation Index
> Fetch the complete documentation index at: https://documentation.mysmtp.com/llms.txt
> Use this file to discover all available pages before exploring further.

# GDPR & Data Protection Policies

> Learn how mySMTP handles customer data under GDPR, including data collection, storage, retention, and your rights as a user.

At mySMTP, we prioritize **customer data security and GDPR compliance** to ensure your information is handled responsibly. This guide outlines how we process, store, and protect data in line with **EU General Data Protection Regulation (GDPR)** requirements.

## 1. What is GDPR and Why Does It Matter?

The **General Data Protection Regulation (GDPR)** is an EU law that governs how personal data is collected, processed, and stored. It ensures that users have control over their data and mandates strict security measures for companies handling customer information.

Key GDPR Principles:

* **Transparency** – Users must know how their data is used.
* **Data Minimization** – Only necessary data should be collected.
* **Security & Confidentiality** – Strong protection against unauthorized access.
* **Right to Access & Deletion** – Users can request access to or deletion of their data.

## 2. How We Handle Customer Data at mySMTP

### Data Collection & Processing

* We **only collect** essential information required for **email delivery** (e.g., email addresses, SMTP credentials, and usage logs).
* Data is **never shared with third parties** for marketing or advertising.
* All processing aligns with **legitimate interest** and **user consent** principles.

### Data Storage & Security Measures

* Customer data is stored on **secure, GDPR-compliant servers** in the EU.
* Strong **encryption (TLS 1.2+)** is used for data in transit.
* **Strict access controls** ensure only authorized personnel can view sensitive data.

### Data Retention & Deletion

* We follow **minimal data retention policies** and automatically delete unnecessary data.
* Customers can request **data deletion** at any time in compliance with **Article 17 (Right to Erasure)**.

### User Rights & Data Access

Under GDPR, users have full control over their data:

* **Right to access** – Request details on stored data.
* **Right to rectification** – Update incorrect information.
* **Right to erasure** – Request permanent deletion of data.

## 3. Security Compliance & Best Practices

To maintain GDPR compliance and enhance security, mySMTP implements:

* **Two-factor authentication (2FA)** for account security.
* **Regular security audits** to prevent vulnerabilities.
* **Logging & monitoring** to detect unauthorized access.

## 4. Contact & Further Information

For GDPR-related inquiries or data requests, contact us at [support@mysmtp.com](mailto:support@mysmtp.com).

We are committed to **privacy, security, and GDPR compliance** to ensure your data remains protected at all times.


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.