Legal
This Privacy Policy explains how Immune ("Immune", "we", "us", or "our") collects, uses, stores, and shares information when you use immune.mx, the Immune dashboard, challenge pages, SMTP gateway, and related services (together, the "Service").
Immune processes email for customers. Message content can be sensitive. We treat Customer Content (defined below) as confidential and process it only to provide and secure the Service.
The Service is operated by Immune. For privacy questions, contact contact@immune.mx.
Customer Content means inbound and outbound email content you or your users route through Immune, including headers, bodies, attachments, envelope data, challenge responses, and related metadata that identifies a message or mailbox.
For Customer Content, you (the customer account) are the controller (or equivalent). Immune acts as a processor / service provider: we process Customer Content on your instructions to operate the challenge gateway, store pending mail as needed for the Service, relay or release messages, and protect the Service.
For account, billing, marketing-site, and product-analytics data that we collect for our own business, Immune is the controller.
We use information to:
We do not sell Customer Content. We do not use Customer Content to train general-purpose AI models for third parties. We do not read Customer Content for advertising.
Access to Customer Content is limited to personnel and subprocessors who need it to operate, support, or secure the Service, under confidentiality obligations. We may access Customer Content when you ask us to debug an issue, when required to investigate abuse or security incidents, or when legally compelled.
You are responsible for informing your users and counterparties (as required by law) that mail may be processed by Immune, including temporary storage of unverified messages and challenge emails sent to unknown senders.
We share information only as needed to run the Service, including:
Subprocessors process data under instructions consistent with this Policy. A current list is available on request at contact@immune.mx.
We retain account and billing data for as long as your account is active and as needed for legal, tax, and dispute purposes. Customer Content is retained only as long as needed for the Service features you use (for example pending-message windows and challenge expiry), then deleted or anonymized according to product settings and our operational schedules, unless a longer period is required by law or an active investigation.
After account termination, we delete or irreversibly anonymize Customer Content within a commercially reasonable period, except where retention is required by law or needed to resolve disputes.
We use administrative, technical, and organizational measures designed to protect information, including encryption in transit, access controls, and isolation of production systems. No method of transmission or storage is perfectly secure. You must protect your account credentials and configure routing carefully.
We may process information in the European Economic Area and in other countries where we or our subprocessors operate. Where required, we use appropriate safeguards for cross-border transfers (for example standard contractual clauses).
Depending on your location, you may have rights to access, correct, delete, restrict, or port personal data, to object to certain processing, and to withdraw consent where processing is consent-based. For Customer Content held in your account, many requests are handled through your dashboard or by asking us as your processor. Contact contact@immune.mx. You may also lodge a complaint with a supervisory authority.
We use essential cookies and similar technologies for authentication, session continuity (including signed-in hints across Immune domains), and security. We do not use third-party advertising cookies on the marketing site by default.
The Service is for business use and is not directed to children under 16. We do not knowingly collect personal data from children.
We may update this Policy from time to time. We will post the revised version on this page and update the "Last updated" date. Material changes may also be notified by email or in-product notice.
Privacy requests: contact@immune.mx