Privacy Policy

This policy explains what personal data the parsedmail.com service processes, why, on what legal basis, for how long and with whom it is shared. The service is operated by the administrator of the parsedmail.com service, who can be reached at [email protected] for any question about this policy or your data.

Who is responsible for your data

For account, billing and website data, the administrator of the parsedmail.com service is the controller. For the emails and attachments that customers send to their ParsedMail inboxes, the customer decides what is sent and why, so the customer is the controller and the administrator acts as a processor on the customer's instructions. Customers on the Scale plan can sign a data processing agreement from the dashboard.

The only contact channel for privacy matters is [email protected].

Data we process

• Account data, such as your name, email address, password hash, workspace name, role, two-factor settings and the API keys you create.
• Billing data, such as your plan, billing period, invoices and the billing country. Card details are entered on the payment operator's page and are not stored by us; we keep only a reference and the last digits shown by the operator.
• Email contents sent for parsing, meaning the raw email (headers, body, attachments) that reaches your inbox or is posted to the API, the extracted JSON, confidence scores, warnings and review corrections. These emails may contain personal data of third parties, for example the senders and people named in them.
• Usage and log data, such as email statuses, webhook delivery attempts and responses, API requests, sign-ins, IP addresses and browser type, kept to run and secure the service.
• Messages you send us at the support address.

Why we process it and on what legal basis

Purpose	Legal basis
Creating and running your account, parsing your emails, delivering results by webhook and API	Performance of a contract (Art. 6(1)(b) GDPR); for email contents, the customer's instructions as controller
Billing, invoices and tax records	Legal obligation (Art. 6(1)(c) GDPR)
Security, fraud and abuse prevention, logs, sender allowlists	Legitimate interest in a secure service (Art. 6(1)(f) GDPR)
Service emails such as code confirmation, usage alerts at 80 percent, failed delivery alerts and renewal notices	Performance of a contract
Answering support messages	Performance of a contract or legitimate interest
Establishing or defending legal claims, including payment disputes	Legitimate interest

We do not sell personal data and do not use it for advertising.

Email contents and model training

Emails you send to the service are processed only to produce the result you asked for: reading the email and its attachments against your schema, showing it in the dashboard and review queue, and delivering it. Email contents are never used to train language models, ours or anyone else's. The language model provider used for parsing receives only the content needed to read each email and is bound not to use it for training.

How long we keep data

• Raw emails and attachments are kept for 7 days in the sandbox, 30 days on Starter, 90 days on Growth, and on Scale for a period you configure up to 365 days, or not at all with zero retention. After that the raw email is deleted and only the extracted JSON and status remain.
• Extracted JSON stays in your workspace until you delete the email or close the account.
• Account data is kept while the account is open and deleted within 30 days of closing it, except what we must keep by law.
• Billing records are kept for the period required by tax and accounting law.
• Security logs are kept for up to 12 months.

Who receives the data

We share data only with service providers that help us run the service, under contracts that limit them to our instructions. By category:

• a hosting provider that runs our servers and databases,
• an inbound mail provider that receives emails sent to ParsedMail addresses and passes them to us,
• a language model provider used to read emails during parsing,
• an email delivery provider that sends account and service emails,
• a payment operator that processes subscription payments,
• the endpoints you configure, which receive results by webhook at your instruction.

We may also disclose data where the law requires it, for example to a court or authority with a valid request.

International transfers

Some providers may process data outside the European Economic Area. Where that happens, transfers rely on an adequacy decision of the European Commission or on the Standard Contractual Clauses, together with additional measures such as encryption in transit and at rest. You can ask for more information at [email protected].

Your rights

You have the right to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format, and withdraw consent where processing relies on consent. You can also lodge a complaint with your local data protection authority. Most data can be exported or deleted directly in the dashboard; for anything else, write to [email protected]. If you are a person named in an email a customer sent to the service, we will forward your request to that customer, who decides on it as controller.

Security

Data is encrypted in transit. Access is limited by role (owner, admin, member, reviewer), two-factor authentication is available for every user, webhooks are signed with a per-endpoint secret, and API keys are scoped. Scale workspaces get single sign-on and an audit log. More detail is on the security page.

Cookies

The website uses only essential cookies needed to keep you signed in, protect forms and remember your preferences. There are no analytics or advertising cookies. See the cookie policy.

Changes to this policy

We may update this policy when the service or the law changes. The date at the top shows the latest version. Material changes are announced by email to account owners before they take effect.