Privacy Policy
p25.dev is a product of Sprenger Company B.V..
1. Our Privacy Philosophy
At Sprenger Company B.V., we follow the principle of Data Minimization. We only collect the technical data strictly necessary to provide our email backup and relay services. We do not build user profiles, we do not use tracking cookies, and we never sell your data to third parties.
2. Data We Collect and Why
Under the GDPR, we process your data based on Art. 6(1)(b) (Contractual Necessity) and Art. 6(1)(f) (Legitimate Interest).
- Account Information: To manage your subscription, we store your email address and billing details.
- Relay Metadata: To route your emails, our servers temporarily process "envelope" data (sender, recipient, and IP address). This is used solely for transmission and to prevent abuse (e.g., rate limiting).
- Backup Data: If you use our backup service, we store the content of your emails in encrypted form. We do not access, read, or "mine" this content.
3. Cookies and Tracking
- No Tracking: We do not use marketing, profiling, or third-party tracking cookies.
- Essential Cookies: We use only strictly necessary session cookies (e.g., to keep you logged into your dashboard). These do not require consent under the GDPR as they are functionally required for the service.
4. Data Retention
We keep your data only as long as necessary:
- Active Account Data: Retained for the duration of your subscription.
- Relay Logs: Automatically purged after 14 days.
- Backup Content: Deleted immediately upon account termination or user-initiated deletion.
- Legal Records: Billing data is retained for 7 years to comply with Dutch tax obligations (Belastingdienst).
5. Data Sovereignty and Sub-processors
Your data is stored on secure servers located within the European Union. We use a limited number of trusted sub-processors (such as our data center provider) who are also GDPR-compliant. A full list of sub-processors is available upon request.
6. Your Rights
Under the GDPR, you have the following rights:
- Access & Portability: You can request a copy of your data at any time.
- Erasure ("Right to be Forgotten"): You can delete your account and all associated data via your dashboard.
- Correction: You can update your account information whenever necessary.
To exercise these rights, contact us at: support@p25.dev.
7. Supervisory Authority
If you believe we are not handling your data correctly, you have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persogensgegevens).