Privacy Policy (GDPR)
This Privacy Policy explains how personal data is processed in connection with the Perap Mail service and website, in line with the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").
1. Who we are
PERAP LLC
1209 Mountain Road Pl NE # 10787
Albuquerque, New Mexico 87110
United States
Email: info@perap.com
PERAP LLC is the controller for the personal data of our customers, their administrators and visitors of this website. For questions about privacy, contact us at the address above.
2. Controller and processor roles
For the content stored in mailboxes (emails, attachments, contacts and calendars), our business customer is the controller and PERAP LLC acts as a processor under Article 28 GDPR, processing that content only to provide the service and on the customer's documented instructions. Data subjects should address requests about mailbox content to the relevant customer company.
3. Data we process
- Account and contact data: name, email address, phone number, company name.
- Billing data: legal entity name, tax ID, billing address, purchased plans, invoices and payment records. Card details are handled by our payment service provider and are not stored by us.
- Security and usage data: IP address, browser and device information, sign-in records, two-step verification records, admin activity logs.
- Sending records: for messages sent through webmail, time of sending, sender and recipient addresses, message ID and sender IP address. Subjects and content are not included.
- Support data: your correspondence with us.
4. Purposes and legal bases
- Providing the service, managing accounts, billing and support: performance of a contract (Art. 6(1)(b)).
- Accounting, tax and other legal obligations, responding to lawful requests: legal obligation (Art. 6(1)(c)).
- Keeping the service secure, preventing fraud, spam and abuse, keeping logs: legitimate interests (Art. 6(1)(f)).
- Establishing, exercising or defending legal claims: legitimate interests (Art. 6(1)(f)).
5. Recipients
We share personal data only where necessary, with these categories of recipients:
- hosting, storage, network security and content delivery providers acting as our processors,
- our payment service provider,
- an AI service provider, only when you use the AI assistant, receiving your request and the related message content to generate a response,
- recipients' mail servers, to deliver the emails you send,
- public authorities, where required by law.
We do not sell personal data and do not use mailbox content for advertising.
6. International transfers
Service data is hosted in data centers in the European Union. PERAP LLC is established in the United States and some of our service providers are located outside the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
7. Retention
- Account and contract data: for the duration of the contract and afterwards for applicable limitation periods.
- Invoices: for the period required by tax law.
- Sending records: 1 year.
- Large files shared by link: at most 30 days, or until the sender removes them.
- Backups: rotated, at most 30 days.
8. Security
We protect data with encrypted connections, two-step verification, access controls, activity logging and regular backups. Passwords are never stored in plain text.
9. Cookies
This website does not use tracking or advertising cookies. The Perap Mail application uses only strictly necessary cookies to keep you signed in securely.
10. Your rights
Under the GDPR you have the right to access your data, to rectification, to erasure, to restriction of processing, to data portability and to object to processing based on legitimate interests. To exercise your rights, contact info@perap.com. We respond within one month. You also have the right to lodge a complaint with the data protection supervisory authority in your country of residence or work.
11. Changes
We may update this policy. The date of the latest version is shown at the top of this page; material changes will be announced to customers by email.