This Privacy Policy describes our protocols for collecting, processing and protecting personal data in strict compliance with the EU General Data Protection Regulation (GDPR) and the Swiss Federal Act on Data Protection (nFADP).
1. Data Controller and Contact
The entity responsible for data processing is MAXONY Suisse SA, Rue Agasse 54, 1208 Geneva, Switzerland. For any questions regarding your data, contact [email protected].
2. Scope of Data Collection
We process personal identifiers (name, email, address, phone number) provided during registration, order placement or support requests in order to fulfil our contractual obligations and provide a personalized user experience.
3. Legal Basis and Purpose of Processing
We process data on the basis of Art. 6(1)(b) GDPR (performance of the contract) and Art. 31 nFADP. Purposes include:
- Customer service management and handling of technical support requests.
- Billing, payment processing and compliance with legal accounting requirements.
- System security monitoring and software optimization.
- Sending notifications related to the account life cycle: reminders during the trial period, inactivity warnings before data deletion, confirmations related to account closure. These notifications form an integral part of the service.
4. Data Residency and Security
All application and personal data is stored in our high-security data center in Geneva, Switzerland. We use Secure Socket Layer (SSL) encryption for all sensitive transmissions. Financial transactions are processed by Datatrans AG (PCI-DSS compliant) and are not stored on our local servers. Your data is stored in Switzerland; only the optional artificial intelligence features described in section 9 may give rise to occasional processing outside Switzerland.
5. Retention and Purge
Data is retained for the entire duration of the business relationship.
- Free accounts without a purchase: data is deleted 30 days after the account is created, after reminder emails have been sent during the trial period.
- Inactive accounts: when no significant activity — login, sending or billing — is recorded for 24 months, the content of the account (lists, contacts, messages, statistics, files) and any remaining credits are deleted, after four warnings sent by email. The login credentials and account settings are retained to allow a return.
- Account closure: in the event of termination via the "My Account" portal, the account immediately becomes inaccessible; the closure can be cancelled for 30 days by contacting support, after which the data is irrevocably purged, except for data that must be retained for legal, accounting, fraud prevention, security or evidentiary reasons.
6. Statutory Rights of the Data Subject
Under the GDPR and the nFADP, you have the following enforceable rights:
| Your rights | How to exercise them |
|---|---|
| Access, rectification and erasure | Manageable via the "My Account" dashboard or by closing the account. |
| Data portability | Exports available in the standard XLS, XLSX and CSV formats. |
| Right to object/withdraw | Users can withdraw their consent to marketing or analytics at any time. |
7. Analytics and Tracking
To preserve data sovereignty, we use Matomo Analytics self-hosted within our infrastructure in Geneva. This configuration ensures that behavioral data is never transmitted to third-party analytics companies. We use cookies to maintain session integrity and to measure the marketing conversion of Google and Microsoft Advertising ads.
Would you like to reset your tracking consent?
8. Data Breach Protocol
In the event of a security compromise affecting personal data, we will notify the competent supervisory authority (the FDPIC in Switzerland) and the affected users within 72 hours of detection.
9. Use of Artificial Intelligence
Some features of the service, identified as "Mailpro AI" (for example: layout assistance, content writing and translation), may use artificial intelligence tools provided by third-party providers whose servers may be located outside Switzerland.
These features are optional: they only run at your request, for the task you trigger. Only the content strictly necessary for the requested task is transmitted to the AI provider. Your contact lists, your campaign statistics and your recipients' data are never transmitted to these systems. By using a "Mailpro AI" feature, you accept this processing for the task concerned.
10. Technical Partners
As part of the optimization and security of our services, we use Cloudflare's tools: a Content Delivery Network (CDN) for fast and reliable access to our services, a Web Application Firewall (WAF) against cyberattacks, and additional security features. Cloudflare acts as a technical partner and remains subject to strict privacy standards; the personal data transmitted to it is limited to what is strictly necessary for the performance of these features.
MAXONY Suisse SA
Rue Agasse 54
Geneva, Switzerland