GDPR Compliance

Our commitment to protecting your data under GDPR

Our GDPR Commitment

Mailneo is fully committed to compliance with the General Data Protection Regulation (GDPR). We have implemented comprehensive measures to ensure the protection of personal data for all our users in the European Union and beyond.

Legal Basis for Processing

We process personal data under the following legal bases:

  • Contract: Processing necessary to fulfill our service agreement with you
  • Consent: When you have given clear consent for specific processing activities
  • Legitimate interests: For our business operations, provided they don't override your rights
  • Legal obligations: When required by law

Your Rights Under GDPR

Right to Access

You have the right to request a copy of the personal data we hold about you.

Right to Rectification

You can request that we correct any inaccurate or incomplete personal data.

Right to Erasure

You have the right to request deletion of your personal data under certain circumstances.

Right to Restrict Processing

You can request that we limit how we use your personal data.

Right to Data Portability

You can request your data in a structured, machine-readable format.

Right to Object

You have the right to object to certain types of processing of your personal data.

Data Protection Measures

  • End-to-end encryption for sensitive data
  • Regular security audits and penetration testing
  • Strict access controls and authentication
  • Data minimization practices
  • Privacy by design in all our features
  • Regular staff training on data protection

International Data Transfers

When we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, plus any legal retention requirements. Our standard retention periods are:

  • Account data: Duration of account plus 30 days
  • Email campaign data: 2 years after campaign completion
  • Analytics data: 26 months
  • Support tickets: 3 years

Data Protection Officer

Our Data Protection Officer can be contacted at: privacy@mailneo.co

For Our Customers: Data Processing

If you use Mailneo to email your own subscribers, you are the data controller and Mailneo acts as your processor. Our Data Processing Agreement is automatically incorporated into our Terms and sets out how we process personal data on your behalf. The third-party subprocessors we rely on are listed on our Subprocessors page. Mailneo gives you the tools to honor your own subscribers' rights directly: you can export any contact's data (CSV or JSON), correct it, or permanently delete it from within the app, and unsubscribe requests are enforced automatically at send time.

Last updated: October 26, 2025