Privacy Notice

This English translation is provided for convenience. If it differs from the Hungarian version, the Hungarian text prevails.

Service provider and data controller

Trackie.io Kft.
Registered office: 1025 Budapest, Ruthén út 28.
Tax number: 28963271-2-41
Company registration number: 01-09-377556
Registering authority: Company Registry Court of the Metropolitan Court of Budapest
Customer support and privacy requests: support@maildeck.pro

Account and communication

We process the email address, password verification value, company details, workspace name, permissions and balance and payment data supplied at registration to provide access and administer the service. Where the contracting party is a sole trader, the lawful basis is performance of the contract. For company representatives and staff, it is the legitimate interest in communicating with the company and securely administering its workspace. An account cannot be created without the required fields. A workspace administrator may also provide a colleague's details.

Contract, payment and security

We record the time of acceptance, declarations and the accepted document copy on the basis of the legitimate interest in demonstrating the contract. For payments, we process the order identifier, amount, currency and payment status; mandatory accounting processing is based on a legal obligation. The session identifier and expiry time support sign-in and protection against misuse. We do not separately collect an IP address or browser identifier for the registration declarations.

Retention and deletion

Account, contact, campaign and delivery data are processed for the duration of the service relationship. On termination, the data are returned or deleted at the customer's choice, with final deletion completed within 30 days. Data are phased out of backups within 90 days; earlier deletions are reapplied after a restore. Contractual evidence and accepted document copies are retained for 5 years after the end of the relationship, and accounting records for at least 8 years. Evidence required for an ongoing legal claim may be retained until the dispute is resolved, subject to individual review. A session remains valid for no more than 30 days and is revoked on sign-out. The minimum data required to honour unsubscribe suppression are retained during the service relationship, then handed to the customer and deleted on termination. Deletion and data requests may be initiated at support@maildeck.pro and are carried out through support.

Campaigns, lists and searches deleted in a restorable manner may remain as records marked as deleted. Final deletion may be requested separately from the controller. Use of the balance does not by itself delete the account.

Recipients and disclosures

For recipient lists, user-initiated searches, campaign content, delivery results and unsubscribe records, the customer determines the purposes of processing, target countries and recipients, and Maildeck acts under the Data Processing Addendum. The customer is responsible for informing recipients and assessing the lawful basis and country-specific conditions for marketing. Maildeck's own controller and processor duties remain in force.

Hetzner Online GmbH (Germany; hosting and database infrastructure in Helsinki, Finland): storage of account data, contacts, campaigns and sessions. Elastic Email Inc. (Canada; SMTP email delivery): sender details, recipient email address, email content and delivery data. The provider's public security information identifies data centres in the EU, the United States and Canada. OpenAI API processes target-market descriptions and search terms for the built-in discovery service. Customers may configure their own SMTP provider. Revolut's hosted payment service processes payments under its own terms.

International transfers and safeguards: The Maildeck application and database are hosted in Helsinki, Finland (EEA). According to Elastic Email's public information, email-delivery data may be processed in the EU, the United States and Canada; storage exclusively within the EEA is not guaranteed. Transfers outside the EEA may take place only under the conditions set out in Chapter V of the GDPR. The provider must ensure an appropriate transfer mechanism and the contractual safeguards required for the processing concerned. Information about the specific recipient and safeguards, including how to obtain a copy, may be requested at support@maildeck.pro. Elastic Email privacy policy: https://elasticemail.com/resources/usage-policies/privacy-policy; data processing addendum: https://elasticemail.com/resources/usage-policies/data-processing-addendum.

The payment provider supplies its own privacy information on the payment page. Recipient details and email content needed for delivery may be disclosed to the SMTP provider. Target-market descriptions and search terms may be disclosed to the built-in search provider.

Data subject requests and remedies

You may request access, rectification and, where the conditions apply, erasure, restriction and data portability, and may object to processing based on legitimate interests. Requests are generally handled within one month; we will notify you within that period of any justified extension. A complaint may be lodged with the Hungarian National Authority for Data Protection and Freedom of Information (naih.hu), and judicial remedies are also available.

Registration does not constitute consent to marketing. We do not make solely automated profiling decisions with legal effect when creating an account. Company discovery initiated by a customer may use relevance scoring; the customer reviews the results.

This document can be saved or printed from your browser.