Last updated: May 24, 2026
Easy Mail Transfer ("EMT") respects your privacy. This policy explains what data we collect, how we process it, and your rights. EMT is the data controller under Türkiye's KVKK (Law No. 6698) and the EU GDPR.
1. Data we collect
- Account data: Email address, name (optional), bcrypt password hash.
- Transfer data: Source and destination IMAP host, port, email, and password.
- Payment data: We do not store card details. Payment processors (PayTR, Lemon Squeezy) handle them. We retain only transaction reference and amount.
- Technical data: IP address, browser info, session cookies (essential only; no tracking cookies).
- Transfer metadata: Folder names, message counts, progress percentages (we never store message content).
2. Message content
Message bodies, attachments, and headers are streamed from source to destination during the transfer. No message content is stored or copied on EMT servers. Only Message-IDs used for deduplication are kept in volatile memory and discarded when the transfer ends.
3. IMAP password protection
Your source and destination IMAP passwords are stored encrypted with AES-256-GCM. The encryption key is held only on the server and never exposed to external components. When a transfer completes or is cancelled, passwords are flagged for deletion and fully erased within 7 days. Our staff cannot read plaintext passwords.
4. Data retention
- Account data: until you delete your account.
- Orders and invoices: as legally required (≥10 years in Türkiye).
- IMAP passwords: deleted on transfer completion (max 7 days).
- Transfer logs: 90 days.
5. Data sharing
We do not sell, rent, or share your data with advertisers. Exceptions:
- Payment processors (PayTR, Lemon Squeezy) — amount, order ID, email.
- Legal obligations — upon valid authority request.
6. Your rights (KVKK / GDPR)
You have rights to access, rectify, erase, restrict processing, port, and complain regarding your personal data. Requests: privacy@easymailtransfer.com
7. Cookies
We use only essential session cookies. No analytics or advertising cookies.
8. Changes
Updates are published on this page with a refreshed "Last updated" date.