Privacy policy

1. Data controller

• Controller: [RAZÓN SOCIAL] (PostCleaner brand)
• Tax ID (NIF): [CIF]
• Address: [DIRECCIÓN POSTAL]
• Email: [CORREO DE CONTACTO]

2. Two different roles: the website and the service

When you visit this website, write to us or sign up, we are the controller of your contact and customer data. When we provide the filtering service, we process the email received by our customers' mailboxes on their behalf: we are data processors and we sign with each customer the agreement required by article 28 of the GDPR.

3. Contact and customer data

• What data: name, company, email address, phone, domains and the message you send us; if you sign up, also billing details.
• What for: to answer your inquiry, prepare an offer, provide the service you hired, invoice and give you support.
• Legal basis: your consent when you submit the form, the application of pre-contractual measures at your request, performance of the contract and compliance with legal obligations (tax and accounting).
• How long: inquiries that don't end in a contract, a maximum of one year; customer data, for the duration of the contract and afterwards for the legal retention periods.
• Commercial communications: we will only send you information about our services if you are a customer or if you give us your permission, and you can unsubscribe at any time.

4. The email we filter for our customers

• What is processed: messages addressed to the protected domains, with their headers, content and attachments, and the technical connection data (IP addresses, sender, recipient, date and analysis result).
• How: the analysis is automatic. Nobody reads your email. Our technical staff only access a specific message if the customer asks them to in order to resolve an incident.
• How long: clean email is delivered immediately and is not stored. Held messages are kept in quarantine for 14 days and then deleted automatically. Technical logs are kept for as long as needed for the security and support of the service.
• Artificial intelligence: it is not used today. If in the future we add an AI review of doubtful email, customers will be notified beforehand and it will be included in the data processing agreement.

5. Where the data is

The filtering server and this website are hosted in an OVHcloud data center located in Canada. Canada has a European Commission adequacy decision, which recognizes that it offers a level of data protection equivalent to Europe's; therefore this international transfer needs no additional safeguards. OVHcloud acts as a sub-processor.

6. Who it is disclosed to

We do not sell or share your data. It is known only to the providers we need to deliver the service (hosting and, where applicable, tax advisers and banks for invoicing), with whom we have the agreements required by law, and to public authorities when the law requires it.

7. Security

We apply appropriate technical and organizational measures: encrypted connections, restricted access with two-factor login, security updates, protection against attacks and backups of the configuration.

8. Your rights

You can request access, rectification, erasure, restriction of processing, portability of your data or object to the processing, and withdraw your consent at any time. Write to us at the email address given above, stating which right you want to exercise.

If the processing affects the email of one of our customers (for example, you are an employee of a company that uses PostCleaner), contact that company, which is the controller; we will help it attend to you.

If you believe we haven't handled your rights properly, you can lodge a complaint with the Agencia Española de Protección de Datos (www.aepd.es).

9. Changes

We may update this policy to adapt it to legal or service changes. We will publish the current version here and, if the change is important, notify customers.