DESign in
Docs:Privacy checklist

Account and legal

Privacy checklist

What belongs in your privacy policy when you run a form with Mailiy: the DPA, naming Mailiy as processor, retention and allowed domains.

  • You concluded the DPA when you signed up. Read it once and keep a printout or PDF on file.
  • Name Mailiy as a processor in your privacy policy.
  • Choose the shortest retention possible, ideally “Don't store”.
  • Set allowed domains so nobody else can use your form.
  • Only ask for fields you really need (data minimisation).
  • hCaptcha, Turnstile and reCAPTCHA are US providers that you add yourself. Name them in your privacy policy or use ALTCHA.