Privacy Policy

1. Who we are

Tramovio is an EU-based email service. We are the data controller for all personal data processed in connection with your use of Tramovio. Contact: privacy@tramovio.com

2. What data we collect

We collect only the data necessary to provide the service:

• Account data: name, email address, hashed password, plan details, billing information.
• Email data: the emails you send, receive, and store in Tramovio. This is your data — we treat it accordingly.
• Usage data: basic logs (login timestamps, IP addresses) used for security and abuse prevention. Retained for 90 days.
• Payment data: processed by our payment provider (Stripe). We do not store full card details.

We do not collect advertising profiles, browsing data, or any data beyond what is required to run the service.

3. How we use your data

• To provide and maintain the Tramovio email service.
• To send transactional emails (receipts, security alerts, account notifications).
• To process payments and manage subscriptions.
• To detect and prevent abuse, spam, and security threats.
• To comply with our legal obligations under EU law.

We do not use your email content for advertising. We do not use your data for profiling. We do not share your data with third parties for marketing purposes.

4. Where your data is stored

All Tramovio email data is stored on servers located within the European Union. Your data does not leave the EU. We do not use US-based cloud infrastructure for email storage. This means your data is not subject to the US CLOUD Act or other non-EU jurisdiction data access requests.

5. Data retention

• Active accounts: data is retained for as long as your account is active.
• Deleted emails: emails moved to Trash are permanently deleted after 30 days.
• Closed accounts: account data is deleted within 30 days of account closure. Billing records are retained for 7 years as required by EU accounting law.
• Security logs: retained for 90 days.

6. Your rights under GDPR

As an EU resident, you have the following rights:

• Right of access: request a copy of the data we hold about you.
• Right to rectification: correct inaccurate data.
• Right to erasure: request deletion of your account and data.
• Right to data portability: export your email data in standard formats (MBOX, EML).
• Right to object: object to processing based on legitimate interests.
• Right to restrict processing: request that we limit how we use your data.

To exercise any of these rights, email privacy@tramovio.com. We respond within 30 days.

7. Cookies

Tramovio uses only essential cookies required for authentication and security (session tokens). We do not use advertising cookies, tracking pixels, or third-party analytics that track you across sites.

8. Third-party services

We use a small number of third-party services to operate Tramovio:

• Stripe (payment processing) — EU data processing agreement in place.
• Brevo (transactional email delivery) — EU-based provider.
• Supabase (infrastructure) — EU region only.

All third-party processors operate under data processing agreements compliant with GDPR Article 28.

9. Security

We encrypt all email data at rest and in transit (TLS 1.3+). We use industry-standard security practices including regular security audits, access controls, and breach notification procedures. In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours.

10. Changes to this policy

We will notify users of material changes to this policy by email and by displaying a notice in the Tramovio interface at least 14 days before changes take effect.

11. Contact

Privacy questions: privacy@tramovio.com

You also have the right to lodge a complaint with your national data protection authority if you believe we have not handled your data correctly.