Privacy Policy – SpamProtect.me

Effective Date: May 21, 2025

At SpamProtect.me, we are committed to protecting your privacy and handling your personal data with transparency, responsibility, and in full compliance with applicable data protection laws, including the GDPR, LGPD, CCPA/CPRA, and other relevant international standards.

1. Data Controller

The data controller responsible for the processing of your personal data is:

SpamProtect.me
Email: privacy@spamprotect.me
Registered in Canada and Portugal, operating globally.

2. Information We Collect

We collect only the minimum data necessary to deliver our email filtering services effectively:

• Account Information: Name, email address, company name (when applicable), and domain(s) managed.
• Technical Data: IP addresses, mail server data, timestamps, log metadata, and volume of emails filtered.
• Email Metadata: Sender, recipient, subject line, and headers (we do not store email content permanently).
• Support Interactions: Any communication made via support forms or emails.

3. Legal Bases for Processing (GDPR / LGPD Compliance)

We process personal data based on the following legal grounds:

• Performance of a Contract: To provide the email filtering service.
• Legitimate Interest: To improve system security, performance, and prevent abuse.
• Consent: For optional features, analytics cookies, and marketing (only where permitted).
• Legal Obligation: When required to comply with regulatory or legal duties.

4. Use of Information

We use collected data to:

• Provide and maintain our email filtering service.
• Monitor system performance and protect against spam and threats.
• Respond to customer support requests.
• Comply with legal and regulatory requirements.
• Improve our service and develop new features (without using identifiable data).

5. User Rights

Depending on your location, you may have the following rights:

Under GDPR / LGPD:

• Right to access your data
• Right to rectify incorrect data
• Right to data portability
• Right to object or restrict processing
• Right to erasure (“right to be forgotten”)
• Right to withdraw consent at any time

Under CCPA / CPRA (California residents):

• Right to know what personal data is collected
• Right to request deletion of your personal data
• Right to opt out of the sale or sharing of personal data (we do not sell data)
• Right to non-discrimination for exercising privacy rights

To exercise your rights, contact us at: privacy@spamprotect.me

6. Data Sharing and International Transfers

We do not sell, rent, or trade your personal information.

Data may be shared with trusted third-party processors (e.g., infrastructure, support tools) strictly under Data Processing Agreements (DPAs), ensuring confidentiality, security, and compliance.

Data may be transferred to countries outside your jurisdiction. In such cases, we implement safeguards such as Standard Contractual Clauses (SCCs) or equivalent protections as required by GDPR and LGPD.

7. Data Security

We apply technical and organizational measures to ensure the confidentiality, integrity, and availability of personal data:

• Encrypted communications (TLS/SSL)
• Server hardening and continuous monitoring
• Access controls and authentication policies
• Data minimization and strict retention policies

8. Data Retention

We retain data only for as long as necessary to fulfill the purposes described above or as required by law.
Log data and metadata may be stored for up to 90 days for security and audit purposes.
Email content is never stored permanently on our servers.

9. Cookies and Tracking

Our website uses only essential cookies during beta. Optional analytics or marketing cookies will only be activated with explicit user consent.

You can manage your cookie preferences via your browser settings or through our cookie banner when applicable.

10. Children’s Privacy

SpamProtect.me is not intended for use by individuals under the age of 16. We do not knowingly collect data from minors. If we become aware of any such data, it will be promptly deleted.

11. Policy Updates

This Privacy Policy may be updated to reflect changes in our practices or legal requirements. Any changes will be posted on this page with the updated date. We recommend checking this page periodically.

12. Contact Us

For any questions regarding your privacy or this policy, or to exercise your data protection rights, please contact:

Data Protection Officer – SpamProtect.me
Email: privacy@spamprotect.me