Privacy Policy — autopmta

This Privacy Policy explains how AutoPMTA LLC ("we", "us", "autopmta"), the operator of autopmta.net, processes personal data when you visit the site, contact us, or use our tools and services. We take a deliberately minimal approach: we collect only what we need to answer you and run the site, we do not sell data, and we do not run advertising or third-party ad tracking.

Who is responsible

The data controller is AutoPMTA LLC, Rhijnspoorplein 10-38, 1018 TX Amsterdam, Netherlands. For any privacy question or to exercise your rights, contact our data protection officer at [email protected]. Our full company details are in the Legal Notice.

What we collect, and why

We process personal data in a small number of clearly defined situations:

When you contact us. If you email [email protected] (or another address) or write to us through the live chat, we receive the information you choose to send — your email address, name if you give it, and the content of your message. We use it solely to answer you, scope work, and keep a record of the conversation.
Live chat. The site uses a self-hosted Chatwoot widget served from chat.autopmta.net. If you open a chat, it processes the messages you send, and may store a small identifier in your browser so a conversation can continue across page loads, along with technical data such as your IP address and browser type. The widget loads only after you interact with the page or the browser is idle, so it does not run unless it is needed.
Server logs. Like virtually all websites, our hosting provider records standard technical logs (IP address, request time, page requested, user agent) for security and to keep the service running. These are retained for a limited period and not used to build profiles of you.
Web fonts. Pages load typefaces from Google Fonts. This means your browser contacts Google's servers, which necessarily discloses your IP address to Google for the purpose of delivering the font files.
Our free tools. The calculators, checkers and generators in our toolkit run entirely in your browser. Anything you paste into them — DKIM keys, email headers, addresses, DNS records — is processed locally on your device and is not uploaded to or stored by us. The DNS-facing tools query public DNS resolvers over HTTPS to read records, but the keys and messages you generate or analyse never leave your machine.

Legal bases (GDPR)

Where the GDPR applies, we rely on the following legal bases under Article 6(1):

Legitimate interests — operating and securing the site, and responding when you contact us and answering your enquiry (Art. 6(1)(f)).
Consent — where required, for example when you choose to open the live chat (Art. 6(1)(a)). You can withdraw consent at any time.
Contract / pre-contract — to take steps at your request before entering into, or to perform, an agreement for our tools or services (Art. 6(1)(b)).
Legal obligation — to comply with applicable law, such as retaining billing records (Art. 6(1)(c)).

Cookies and similar technologies

We do not use advertising, analytics or cross-site tracking cookies. The live chat may set a functional identifier in your browser's local storage so an open conversation persists — this is set only if you use the chat, and you can clear it from your browser at any time. We do not place non-essential cookies without your action.

Who we share data with

We do not sell personal data and we share it only with the service providers needed to run the site and respond to you, acting as our processors or independent third parties:

Live chat — Chatwoot, self-hosted on infrastructure we control at chat.autopmta.net.
Google Fonts — for delivering web fonts, as described above.

We may also disclose data where we are legally required to, or to establish, exercise or defend legal claims.

International transfers

Some providers may process data outside your country, including outside the European Economic Area. Where that happens we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision. Contact us if you would like more detail on a specific transfer.

How long we keep it

We keep personal data only as long as needed for the purpose it was collected: correspondence for as long as needed to handle your enquiry and any resulting relationship, billing records for the period required by law, and server logs for a short rolling window. When data is no longer needed, we delete or anonymise it.

Your rights

Subject to applicable law, you have the right to:

access the personal data we hold about you;
have inaccurate data corrected;
have your data erased ("right to be forgotten");
restrict or object to certain processing;
data portability, where applicable;
withdraw consent at any time, without affecting prior processing; and
lodge a complaint with your local data protection authority.

To exercise any of these, email [email protected]. We will respond within the timeframe required by law (one month under the GDPR, extendable where permitted).

Security

We apply appropriate technical and organisational measures to protect personal data, including encryption in transit (HTTPS) and access controls. No system is perfectly secure, but we work to keep the data we hold safe and to limit what we collect in the first place.

Children

The site and our services are intended for businesses and professionals, not for children. We do not knowingly collect data from anyone under 16.

Changes to this policy

We may update this policy as our practices or the law change. We will revise the "last updated" date above, and for material changes we will take reasonable steps to make the change clear.

Contact

Questions about this policy or your data: [email protected], or write to us at the address in the Legal Notice.