Legal
Privacy Policy
How we collect, use and protect your personal data.
Last updated: May 25, 2026
1. Who we are
mailazur ("we", "us", "our") is the data controller for personal data processed through this website and the mailazur email service.
Legal entity: SILICONWADI LLC (operating mailazur)
Registered address: 1021 E Lincolnway, Suite 8847, Cheyenne, WY 82001, USA
Privacy contact: privacy@mailazur.com
2. What data we collect
We only collect data we need to deliver the service.
- Account data — email address, name, tenant identifier, hashed password, two-factor secret (if enabled), domain(s) you operate.
- Billing data — invoicing identity (company or individual), VAT number, postal address, payment method token. Card details are handled by our payment provider; we never see them.
- Service usage data — IP address, user agent, timestamps and event type (login, password change, mailbox creation, API call). Used for security, abuse prevention and audit.
- Mailbox content — emails, attachments, calendars and contacts you store on your mailbox. This content is stored on EU servers operated by OVHcloud, encrypted at rest, and is never read or analysed for advertising purposes.
- Support correspondence — messages you send to our support or sales addresses.
3. How we use your data
- Provide, operate and maintain the email service and the customer portal.
- Process payments, issue invoices, comply with tax and accounting obligations.
- Detect and prevent fraud, abuse, brute-force attempts and spam.
- Provide customer support and respond to your requests.
- Send essential service notices (renewals, security alerts, downtime).
- Improve reliability and performance of the service.
We do not sell your personal data, and we do not use it for behavioural advertising or third-party profiling.
4. Legal basis for processing
Under the EU General Data Protection Regulation (GDPR), we rely on the following legal bases:
- Performance of a contract (Art. 6(1)(b)) — to create and manage your account, deliver the service, process payments.
- Legitimate interest (Art. 6(1)(f)) — to keep the service secure, prevent abuse, maintain audit logs.
- Legal obligation (Art. 6(1)(c)) — to keep accounting records and respond to lawful authority requests.
- Consent (Art. 6(1)(a)) — for any optional communications you explicitly opt-in to. You may withdraw consent at any time.
5. Sub-processors
We use a small set of carefully selected sub-processors to run the service. All of them have signed a Data Processing Agreement compliant with GDPR Art. 28.
| Sub-processor | Purpose | Location |
|---|---|---|
| OVHcloud SAS | Mailbox hosting (Zimbra) | France (EU) |
| Cloudflare, Inc. | CDN, edge compute, DDoS protection | Global edge — EU termination preferred |
| Mollie B.V. | Payment processing (cards, SEPA, iDEAL) | Netherlands (EU) |
| Stripe Payments Europe Ltd. (planned) | Payment processing — alternative | Ireland (EU) |
| Transactional email provider | Sending service notices & password resets | EU |
An updated list is available on request at privacy@mailazur.com. We will notify customers of any change at least 30 days before a new sub-processor is added.
6. Data retention
- Mailbox content — kept for the duration of your subscription, plus a 30-day grace period after account deletion (allowing reactivation), then permanently erased.
- Account & profile data — same as mailbox content.
- Security & access logs — 12 months.
- Audit trail (admin actions, billing events) — 24 months.
- Invoices & tax records — 10 years (French commercial law).
- Support correspondence — 24 months after the last message.
7. International transfers
Your mailbox content and account data are stored exclusively on servers located within the European Union (France). We do not transfer personal data outside the EU/EEA.
A small portion of metadata (IP address, request headers) may transit through Cloudflare's global edge network. Cloudflare is bound by the EU Standard Contractual Clauses and processes such metadata strictly to deliver the requested page or API call.
8. Your rights
Under the GDPR, you have the right to:
- Access — obtain a copy of the personal data we hold about you.
- Rectification — correct inaccurate or incomplete data.
- Erasure ("right to be forgotten") — request deletion of your data, subject to our legal retention obligations.
- Restriction — limit how we process your data.
- Portability — receive your data in a structured, machine-readable format. Mailbox content is exportable as standard
.mbox/ IMAP at any time. - Object — object to processing based on legitimate interest.
- Withdraw consent — where processing is based on consent.
- Lodge a complaint — with your local supervisory authority. In France, the CNIL (cnil.fr).
To exercise any of these rights, email privacy@mailazur.com. We respond within 30 days.
10. Security
We apply the technical and organisational measures expected of a modern email provider: encryption in transit (TLS 1.2+) and at rest, salted password hashing, optional two-factor authentication, hardware-isolated mailbox storage, principle of least privilege for staff, brute-force throttling, audit logging and regular backups. Suspected security incidents can be reported to security@mailazur.com.
11. Children's privacy
The service is intended for professional use and is not directed at children. We do not knowingly collect personal data from individuals under the age of 16. If you believe a minor has provided us with personal data, please contact us and we will delete it.
12. Changes to this policy
We may update this Privacy Policy to reflect changes in our service, the law, or our sub-processors. The "Last updated" date at the top of this page always reflects the current version. For material changes, we notify active customers by email at least 30 days before the new version takes effect.
13. Contact
For any question about this policy or your personal data:
Email: privacy@mailazur.com
Postal: SILICONWADI LLC — 1021 E Lincolnway, Suite 8847, Cheyenne, WY 82001, USA