Privacy Policy

This Privacy Policy explains how Papilee SMTP Console ("Papilee", "we", "us" or "our") collects, uses, stores and shares information when you use our website and services at console.papilee.us, including email sending, recipient-list tools, mailbox management and Smart Links.

The information processed depends on the features you choose to use. We aim to handle it responsibly, for legitimate service, operational and security purposes.

1. Information We May Collect

Depending on your use of Papilee, information may include:

• Account information: usernames, authentication information, account preferences and administrative records.
• Email account configuration: email addresses, SMTP or mailbox server names, ports, connection settings and credentials supplied to connect an email account.
• Messages and recipients: sender and recipient addresses, CC and BCC fields, subject lines, message content, attachments and delivery or processing status.
• Campaign and personalisation information: recipient lists, campaign content, templates, merge-tag values, sending settings, scheduling and queue information.
• Email Validator and Sorter information: email addresses or lists submitted for checking, validation results, sorting categories and related processing information.
• Image invitation information: images, designs, text and other materials you upload or submit when creating or sending invitations and email adverts.
• Mailbox information: messages, folders, attachments and message details accessed when you use connected mailbox features.
• Smart Links information: original destination URLs, generated redirect links, link identifiers, click counts and technical information associated with link requests.
• Custom-domain information: domain names, ownership-verification records, DNS information and SSL certificate provisioning and status information.
• Technical information: IP addresses, browser and device details, timestamps, request information, diagnostic records and application or security logs, where processed by the service.

2. How We Use Information

We may use information to:

• Authenticate users and operate the Console.
• Connect to configured SMTP servers and submit emails at your request.
• Manage campaigns, recipient lists, sending queues and delivery settings.
• Apply personalisation values and merge tags to messages you prepare.
• Validate and sort email addresses when you request those operations.
• Process images and other materials used in invitations and email adverts.
• Access configured mailboxes and display or manage messages when you use mailbox features.
• Create unique Smart Links that redirect visitors to destinations you specify and record link engagement.
• Verify custom-domain ownership, check DNS configuration and provision or verify SSL certificates when requested.
• Maintain account settings, troubleshoot errors, monitor service health and protect against unauthorised access or abuse.
• Meet applicable legal and regulatory obligations.

3. Email Sending and Mailbox Services

When you send an email or start a campaign, Papilee uses the email account and SMTP server configured for that operation. Relevant message information, recipient details and attachments are transmitted to the email provider for processing and delivery.

Where mailbox access is enabled, Papilee may communicate with the configured mail service to retrieve, display or manage messages and folders at your request. Your email provider may independently store, process or retain those messages under its own terms and privacy policy.

Email delivery may involve recipient mail providers and other systems outside our control. We cannot guarantee delivery, availability or the independent privacy practices of those providers.

4. Email Validator and Sorter

When you submit an email address or recipient list to the Validator or Sorter, Papilee processes the submitted addresses to perform the requested checks and organisation. The resulting validation information and sorting output may be displayed to you or made available through the relevant feature.

You should submit only recipient information you are authorised to process. Validation results are technical indicators and should not be treated as an absolute guarantee that an address belongs to a particular person, is monitored, or will accept a message.

5. Smart Links, Click Tracking and Custom Domains

Smart Links allow you to create unique links that redirect visitors to destination URLs you provide. When someone follows a generated link, the request is processed by Papilee so that the visitor can be redirected and the associated link activity can be counted.

Depending on the feature and server configuration, technical information associated with a link request may include the time of the request, IP address, browser or device information and referrer information. This information may be used to provide click counts, troubleshoot the service, maintain security and understand link engagement.

If you use a custom domain, Papilee may process the domain name and DNS records needed to verify that you control the domain and that it points to the required server. When you request SSL, the domain name is submitted to the certificate authority responsible for issuing the certificate.

Papilee uses Let's Encrypt for SSL certificate provisioning. Publicly trusted TLS certificates are generally recorded in public Certificate Transparency logs. As a result, a custom hostname for which a certificate is issued may be publicly discoverable in those logs. Certificate Transparency records do not contain your private certificate key.

You are responsible for choosing destination URLs and custom domains that you are authorised to use, and for providing appropriate notice to people who receive or follow your links.

6. Credentials and Account Security

Credentials supplied to connect email accounts are used to authenticate with the relevant mail services. Access to these credentials and account configuration is intended to be restricted to the application and authorised server operations.

We use reasonable measures intended to protect information handled by the service. However, no internet transmission or electronic storage system can be guaranteed to be completely secure. You are responsible for protecting your account credentials and promptly reporting suspected unauthorised access.

7. Sharing and Third-Party Services

We do not sell personal information to third parties.

Information may be transmitted or disclosed when necessary to:

• Email providers and SMTP or mailbox servers to send messages or access mailboxes at your request.
• Hosting, infrastructure and security providers that support operation and protection of the service.
• Certificate authorities, including Let's Encrypt, when you request SSL certificate provisioning for a custom domain.
• Technical service providers where needed to maintain, troubleshoot or secure the application.
• Law enforcement, regulators or other parties where disclosure is required by applicable law or valid legal process.

Third-party providers operate under their own terms, security practices and privacy policies. Their handling of information is not controlled entirely by Papilee.

8. Data Storage and Retention

Information may be held in application databases, account configuration, campaign records, temporary processing data, operational logs, link records or on the mail servers you connect to. The information retained and its retention period depend on the feature used and the relevant system configuration.

Messages stored by your email provider may remain there independently of Papilee. We retain information for as long as reasonably necessary for service operation, security, troubleshooting and applicable legal obligations. Where information is no longer needed, we take reasonable steps to delete or dispose of it, subject to operational and legal requirements.

9. Cookies and Sessions

The Console uses session cookies and related technical mechanisms to maintain login sessions, support security and provide essential application functionality. You can control cookies through your browser, although disabling essential cookies may prevent parts of the service from working correctly.

10. Your Choices and Privacy Rights

Depending on your location and applicable law, you may have rights to request access to, correction of or deletion of personal information, or to object to or restrict certain processing.

You should use the available account controls to manage connected email accounts and other settings. Removing an account from Papilee may not delete messages already stored by your email provider or recipients. Similarly, deleting a Smart Link from Papilee may not remove copies of its destination URL or link from other systems or messages.

To make a privacy request, contact the Papilee service administrator through the official service website.

11. Children's Privacy

The Console is not intended for children below the minimum age required to use the service under applicable law. We do not knowingly collect children's personal information in violation of applicable legal requirements.

12. Changes to This Policy

We may update this Privacy Policy as the Console, its features or applicable legal requirements change. Updates will be published on this page with a revised effective date. Please review this page periodically.

13. Contact

For privacy questions or requests concerning information handled by Papilee SMTP Console, contact the service administrator through the official website: console.papilee.us.

Papilee SMTP Console · Privacy Policy · console.papilee.us/privacy