LegalLast Updated: 2nd October 2026
This Privacy Policy describes how Maileroo Group Pty Ltd (ACN 691 482 836) ("Maileroo", "we", "us", or "our") collects, uses, stores, shares, and protects your personal information when you use our website, Email API, SMTP relay services, email marketing platform, and related services (collectively, the "Services").
Our registered office is located at:
Level 14, 333 Collins Street
Melbourne VIC 3000
Australia
By accessing or using the Services, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with our data practices as described in this Privacy Policy, please do not use the Services.
Questions or concerns? If you have any questions about this Privacy Policy or our data practices, please contact us at [email protected].
We collect various types of information in connection with the Services, including:
We collect personal information that you voluntarily provide to us when you:
The personal information we collect may include:
Accuracy of Information: You represent that all information you provide is true, complete, and accurate, and you agree to notify us promptly of any changes to such information.
When you access or use the Services, we automatically collect certain information about your device and usage patterns, including:
This information is collected through cookies, web beacons, log files, and similar technologies. For more information about our use of cookies, please see Section 5 below.
We may receive information about you from third-party sources, including:
We do not knowingly collect or process sensitive personal information such as racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sexual orientation, except where required by law or with your explicit consent.
We use the information we collect for the following purposes:
We may use your information for other purposes with your explicit consent, which you may withdraw at any time by contacting us at [email protected].
If you are located in the European Economic Area (EEA), United Kingdom (UK), or Switzerland, we process your personal information based on the following legal grounds:
We may share your personal information in the following circumstances:
We share information with third-party service providers who perform services on our behalf, including:
These service providers are contractually obligated to protect your information and use it only for the purposes for which it was disclosed.
We may share information with our parent company, subsidiaries, affiliates, and related entities, all of whom are required to treat your information in accordance with this Privacy Policy.
In the event of a merger, acquisition, reorganization, bankruptcy, or sale of assets, your information may be transferred to the successor entity. We will notify you of any such change and any choices you may have regarding your information.
We may disclose your information if required to do so by law or if we believe in good faith that such disclosure is necessary to:
We may share your information for other purposes with your explicit consent or at your direction.
We may share aggregated or anonymized information that cannot reasonably be used to identify you for research, marketing, analytics, or other purposes.
We use cookies and similar tracking technologies to collect and store information about your interactions with the Services.
Cookies are small text files stored on your device that help us recognize you, remember your preferences, and improve your experience. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain on your device until deleted).
Required for the Services to function properly. These cookies enable core functionality such as security, authentication, and session management. You cannot opt out of these cookies.
Remember your preferences and settings to enhance your experience.
Help us understand how visitors use the Services so we can improve performance and user experience.
Used to track visitors across websites to display relevant advertisements and measure campaign effectiveness.
Most web browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, disabling cookies may limit your ability to use certain features of the Services.
You can manage cookies through:
When you use our Services to send emails, we may use tracking pixels and other technologies to track email opens, clicks, and other engagement metrics. This information is used to provide analytics and improve deliverability.
Our Services may offer you the ability to register or log in using third-party social media accounts (e.g., Google, GitHub, Facebook). When you use this feature:
We recommend reviewing the privacy policies of these social media providers to understand how they collect, use, and share your information.
Our servers are located in Germany. If you access the Services from outside Germany, your information will be transferred to, stored in, and processed in Germany and potentially other countries where our service providers operate.
These countries may have data protection laws that differ from those of your country of residence. However, we take appropriate measures to ensure that your personal information remains protected in accordance with this Privacy Policy and applicable law.
For data transfers from the EEA, UK, or Switzerland, we rely on:
As an Australian company, we comply with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). When transferring personal information overseas, we take reasonable steps to ensure the recipient complies with the APPs or is subject to similar privacy protections.
We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retained for the duration of your account plus a reasonable period thereafter for business and legal purposes.
Email content may be retained for up to 90 days for troubleshooting and support purposes. Email metadata and analytics may be retained longer for performance analysis and deliverability monitoring.
Retained for at least 7 years to comply with tax and accounting regulations.
Retained until you opt out or request deletion.
Retained for a reasonable period to provide ongoing support and improve our services.
When we no longer have a legitimate business need to process your information, we will either delete or anonymize it. If deletion is not possible (e.g., because data has been stored in backup archives), we will securely store your information and isolate it from further processing until deletion becomes possible.
We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:
However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. You are responsible for maintaining the confidentiality of your account credentials.
The Services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18 years of age.
If you are under 18, you may not use the Services or provide any information to us. By using the Services, you represent that you are at least 18 years old.
If we become aware that we have collected personal information from a child under 18 without verification of parental consent, we will take steps to delete that information promptly. If you believe we have collected information from a child under 18, please contact us immediately at [email protected].
Depending on your location, you may have certain rights regarding your personal information:
If you are located in the EEA, UK, or Switzerland, you have additional rights under the GDPR and UK GDPR, including:
If you are located in Australia, you have rights under the Privacy Act 1988 (Cth), including:
If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA), including:
To exercise any of these rights, please contact us at [email protected]. We will respond to your request within the timeframe required by applicable law (typically 30 days).
You can also manage certain information through your account dashboard, including:
We may request specific information from you to verify your identity before processing your request.
With your consent (where required by law), we may send you marketing communications about our Services, new features, promotions, and related information.
You may opt out of marketing communications at any time by:
Please note that opting out of marketing communications does not affect transactional or service-related emails (e.g., account notifications, billing statements, security alerts).
Some web browsers have a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activities tracked. At this time, there is no universally accepted standard for how to respond to DNT signals.
We do not currently respond to DNT browser signals. If a standard for responding to DNT signals is established in the future, we will update this Privacy Policy accordingly.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will:
We encourage you to review this Privacy Policy periodically. Your continued use of the Services after we post changes constitutes your acceptance of the updated policy.
If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:
Maileroo Group Pty Ltd
ACN 691 482 836
Level 14, 333 Collins Street
Melbourne VIC 3000
Australia
Email: [email protected]
For privacy-related inquiries, you may also contact our Data Protection Officer at: [email protected]
We have appointed EU Rep as our Representative under Article 27 of the EU General Data Protection Regulation ("GDPR"). All GDPR queries from EU Data Subjects or Data Protection authorities should be submitted to eurep.ie via their dedicated form. BizLegal Ltd trading as EU Rep have their registered office at 27 Cork Road, Midleton Co. Cork, Ireland. Company number 635921.
If you are located in the EEA, UK, or Switzerland and are unsatisfied with our response to your privacy concerns, you have the right to lodge a complaint with your local data protection supervisory authority.
If you are located in Australia and are unsatisfied with our response, you may lodge a complaint with:
Office of the Australian Information Commissioner (OAIC)
GPO Box 5218
Sydney NSW 2001
Australia
Phone: 1300 363 992
Website: www.oaic.gov.au
For Australian users, we comply with the Australian Privacy Principles under the Privacy Act 1988 (Cth). You have the right to access and correct your personal information and to complain about breaches of privacy. We will respond to access requests within 30 days.
For users in the EEA, UK, and Switzerland, we process your data in accordance with the GDPR and UK GDPR. You have enhanced rights as described in Section 11.2 above.
California residents may contact the California Department of Consumer Affairs Complaint Assistance Unit at:
1625 North Market Blvd., Suite N 112
Sacramento, California 95834
Phone: (800) 952-5210
Website: www.dca.ca.gov
This Privacy Policy was last updated on 2nd October 2026. We encourage you to review this policy periodically to stay informed about how we protect your information.
