Privacy Policy

This policy explains what data Proxamail (the "Service") collects and how we use it. The data controller is Peakpurple Yazılım Danışmanlık ve Pazarlama Limited Şirketi, İkitelli OSB Mah. Dersan B Blok Sk. B Blok No: 1 İç Kapı No: 088, Başakşehir, İstanbul, Türkiye. You can reach us at support@proxamail.com.

1. Data we collect

• Account data: your email address, organization name, and a securely hashed password.
• Product data: main domains you verify, domains you add or purchase, masking configurations, and blacklist check results.
• Registrant data you provide for domains purchased in your name (name, organization, address, email, phone), which the registrar and the domain registry require by ICANN rules.
• Mailbox credentials you choose to store for inbox management, encrypted at rest.
• Messages you send through the contact or support form.
• API keys you create (stored only as a hash).
• Basic technical data such as request metadata and logs.

2. How we use it

We use your data solely to provide and operate the Service: authenticating you, managing your domains and masking, running blacklist checks, sending transactional emails (such as verification and password reset), and securing the platform.

3. Service providers

We share data with infrastructure providers only as needed to run the Service:

• Cloudflare — the masking proxy and edge network, plus encrypted storage of database backups.
• AWS Route 53 — DNS hosting for your domains.
• Openprovider — domain registration in your name (receives the registrant data listed above).
• Resend — sending transactional emails.
• Railway — application and database hosting.
• Sentry — error monitoring (EU region); receives technical error details, not your content.
• Blacklist operators (Spamhaus, SURBL, URIBL, Spam Eating Monkey, NordSpam, SuomiSpam) — status lookups via DNS; only the domain name being checked is sent.
• Stripe — payment processing; card details are entered on Stripe and never stored by us.
• PostHog — privacy-friendly product analytics (EU hosting; aggregate usage and funnel metrics).

4. Cookies & analytics

We use a single, essential, HTTP-only session cookie to keep you logged in. We also use privacy-friendly product analytics (PostHog) to understand aggregate usage and improve the product. We do not use third-party advertising cookies.

5. Data retention and deletion

We retain your data while your account is active. You can delete your account and associated data yourself from Settings → Account, or request deletion by contacting us. Some records may be kept for as long as the law requires (for example invoices and domain registration records).

6. Your rights

Depending on where you live, you may have the right to access, correct, export or delete your personal data, to object to or restrict certain processing, and to lodge a complaint with a supervisory authority. This includes rights under the EU/UK GDPR and, in Türkiye, the Personal Data Protection Law (KVKK). To exercise these rights, contact support@proxamail.com.

7. Security

Passwords and API keys are hashed, tenant data is isolated at the database level (row-level security), and internal secrets are not exposed to the browser.

8. Contact

Privacy questions or deletion requests: support@proxamail.com.