Privacy notice

Controller

Edelverse GmbH, Am Mattenhof 2a, 6010 Kriens, Switzerland · info@mailmigo.ch. Contact us here about your privacy rights.

Data and purposes

When you forward an email to check@mailmigo.ch, we process your address, forwarded headers, message text, links, attachments and extractable attachment text where possible. We also record technical connection data such as the observed SMTP IP address, times, status, check ID, hashes and the assessment. Emails to info@mailmigo.ch contain your correspondence.

We use this information to assess the message, reply, limit abuse and overload, investigate errors and answer enquiries. A forwarded email can contain data about other people.

Providers and international processing

Our inbound and scoring servers run with nine in Switzerland. Hoststar provides domain/DNS and email mailbox and sending services. We send normalised email content to Microsoft Azure for AI assessment. This may include text, metadata, links and limited extracted attachment text. We do not upload the original email file as a file, but transmitted content may still be sensitive.

We currently use Azure Global Standard, so Microsoft may process content outside Switzerland. Microsoft states that it does not use inputs and outputs to train foundation models without permission. Processing and possible retention for service operation and abuse monitoring follow the Azure contract and product settings.

For supplementary web research, we form reduced queries from main domains and general topics. We do not use the full message, complete email addresses or personal URL parameters as search terms. Azure web search uses Bing; its queries have separate terms and may leave the geographic processing boundary. A search result alone does not authenticate a message.

Retention and deletion

Postfix holds the original email until confirmed handover; disruptions are subject to its queue rules. The encrypted local job is removed after the result is saved, otherwise by default after 24 hours plus cleanup. The encrypted verdict is removed after a confirmed reply or on expiry and cleanup. Pseudonymous audit records without message text are deleted by default after seven days. The production account and payment database is not yet connected.

We retain personal scan metadata in our database and our own application, mail-server and access logs for no more than 180 days. We delete data earlier when it is no longer needed. Subject data is deleted after 30 days and scan histories after 90 days. The limit for our logs runs from each log event. Backups and data held by service providers follow the separate rules described below.

Account data is needed while a subscription is active. Invoices, payments and accounting records are kept separately from scan histories as required by law, generally ten years after the financial year in Switzerland. Replies in mailboxes, provider retention and backups follow their own rules. Local deletion does not immediately overwrite physical storage.

Website and your rights

The website runs as a deploio app with nine in Switzerland and sets no analytics or marketing cookies itself. We do not yet process payments because Plus is unavailable. Once payments start, providers will receive only the details needed for orders and billing; MailMigo does not intend to store card numbers.

You may request access, correction or deletion, subject to legal obligations and valid retention grounds. Contact info@mailmigo.ch. You may also contact the Swiss Federal Data Protection and Information Commissioner.