Privacy notice

Last updated 20 October 2026

Who we are. mxsin.com (“we”) is operated by Interactive Enterprises Limited (company number 137228C). We are the controller for account data and a processor for the email our customers send through us. Contact: privacy@mxsin.com.

What we collect

Account data: name, company, email, password hash, 2FA settings, sign-in history (time, IP, browser) and audit records.
Sending data (on behalf of customers): message metadata (sender, recipient, subject, status, timestamps, delivery responses, opens and clicks if the customer turned tracking on). Message bodies are kept only until handed to the receiving server.
Mailbox data for @mxsin.com mailboxes, stored on our server in the EU.
Abuse and security data: complaint and bounce reports, blocklist checks, malware scan results.

Why and lawful basis

To provide the service (contract).
To keep the service and the wider email ecosystem safe: fraud and abuse prevention, spam and malware filtering, rate limits (legitimate interests).
To meet legal duties (legal obligation).

Sharing

Our server host (Contabo GmbH, Germany) and Cloudflare (Turnstile bot protection). We do not sell data, and there are no analytics or ad trackers. Email is, by its nature, delivered to the recipient's provider.

Retention

Message logs: 30 days. Inbound webhook copies: 7 days. Account data: for the life of the account plus up to 12 months. Consent records: 2 years.

Your rights

Access, correction, deletion, restriction, objection and portability, under the Isle of Man Data Protection (Application of GDPR) Order 2018 and UK GDPR. You may complain to the Isle of Man Information Commissioner or the UK ICO.