Privacy Policy
Last updated: 16 August 2025
This policy explains how mlsndr processes personal data in connection with our email delivery service.
Controller & Contact
B-WEB ApS (Denmark) is the controller for our own account and contact data, and acts as a processor for email content and metadata we handle on behalf of our customers.
Contact: hello@mlsndr.com
Data We Process
- Account data: name, email, login, customer affiliation.
- Service configuration: sender domains, senders, Microsoft 365 consent (tenant ID), technical settings.
- Email metadata: from, recipients, subject, timestamps, delivery status, headers.
- Email content: when you instruct us to send/store temporarily (e.g., queue/attachment handling).
- Technical logs: IP, user-agent, diagnostic and error logs.
Purpose & Legal Basis
- To provide and operate the service (GDPR Art. 6(1)(b)).
- Security, abuse prevention, and troubleshooting (Art. 6(1)(f)).
- As processor: processing under customer’s documented instructions (Art. 28).
Retention
We retain data as long as necessary for the purposes above. Operational and delivery logs are typically kept for a limited period (e.g., 90 days) unless otherwise agreed or required by law.
Sharing & Transfers
- Microsoft 365 / Graph: processing when you select the Microsoft channel.
- Hosting/subprocessors: trusted providers for infrastructure and monitoring.
- Transfers outside the EU/EEA may occur depending on your Microsoft setup; appropriate safeguards are applied.
Security
We use technical and organizational measures including access controls, encryption in transit, per-customer/tenant isolation, and audit logging.
Your Rights
You have the right to access, rectify, erase, restrict, portability, and object. Contact hello@mlsndr.com. Where we act as processor, we will refer the request to the relevant controller (our customer).
Cookies
The public site primarily uses necessary cookies. The product may set session cookies for authentication and security.
Subprocessors
Key subprocessors include Microsoft (Microsoft 365/Graph and potentially Azure). An up-to-date list is available upon request.
Changes
We may update this policy. Material changes will be communicated in-product or by email.