Privacy policy
How user information and data entrusted by customer organisations are used.
Version 1.0 · 2026-10-12
AgentsMail is operated by MIKE MC FORMATIONS LLC.
1704 Llano St Ste B-1433, Santa Fe, NM 87505, USA
support@agentsmail.io1. Who processes your data?
MIKE MC FORMATIONS LLC is the controller for operating AgentsMail: accounts, commercial relationships, billing, support, security and its own communications. For contact lists, campaigns and processing determined by a customer organisation, that customer is normally the controller and the LLC acts as processor under the DPA.
The LLC’s address and contact are shown at the top of this page. If you receive an email from an AgentsMail customer, first contact the sender identified in the message. We can forward or assist with the request without replacing the customer’s decisions.
2. Data, purposes and legal bases
We receive information you provide, information supplied by your organisation’s members or authorised integrations, and technical data needed for your interactions. Required fields are needed for the requested service; without them we may be unable to provide it.
| Processing | Data and recipients | Basis and retention |
|---|---|---|
| Account and access | Identity, email, organisation, roles, sessions; hosting and database providers. | Contract for the contracting user; legitimate interest in administering member access. During account use, then for closure and outstanding requests. |
| Orders and billing | Billing details, payment references, subscriptions, invoices; Stripe and technical providers. | Contract and accounting/tax obligations. During the relationship, then for applicable statutory retention periods for the relevant records. |
| Support and complaints | Contact details, messages and useful attachments; authorised staff and request-handling tools. | Contract or legitimate interest in responding and protecting rights. Until resolution, then only necessary records for an obligation or dispute during its applicable period. |
| Security and diagnostics | Technical identifiers, IP addresses in request logs, errors and access events; infrastructure and diagnostics when enabled. | Legitimate interest in preventing abuse and maintaining the service; legal obligations where applicable. As needed for investigation and service protection, with restricted access. |
| Our communications | Email and subscription or objection preferences. | Consent where required for marketing, or an applicable legal exception; until withdrawal or objection, then minimal evidence of the objection. |
| Customer data | Contacts, supplied fields, sources, lists, content, events and objections; providers described on the dedicated page. | Instructions and lawful basis determined by the customer. During the service, then return/deletion under the DPA, subject to legal exceptions. |
3. Retention and deletion
These criteria do not mean that every category is automatically purged after a uniform period. Retention depends on purpose, the contractual relationship, applicable obligations and deletion requests. Technical log and backup retention also depends on the services used. Contact us for details of the data concerned.
An objection may require retention of a minimal identifier to prevent another message. Backups may temporarily retain a copy until expiry; account deletion does not guarantee immediate backup erasure. Records needed for a legal obligation or defence of a right are restricted to that purpose.
4. Recipients and international transfers
Access is limited to people authorised for their duties, necessary service providers, tools you connect and authorities where legally required. The Subprocessors page distinguishes infrastructure used from integrations dependent on enabled features.
The operator is established in the United States. The database and sending region are in Ireland according to information from the operator; this does not exclude access, logs, support operations or transfers outside the European Economic Area. The EU customer–LLC relationship and onward supplier transfers require separate consideration. No supplier certification is presented as the LLC’s certification.
Applicable safeguards must match the actual entities and processing: an adequacy decision covering the recipient or appropriate safeguards where needed. Request available information and safeguards from support@agentsmail.io before entrusting data.
5. Your rights
Under the GDPR’s conditions, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. You may object to direct marketing at any time. Consent can be withdrawn without affecting prior lawful processing. French law also provides for instructions concerning data after death.
Write to support@agentsmail.io with your request and the data concerned. Proportionate identity evidence may be requested if there is doubt; do not send identity documents unsolicited. GDPR requests are normally handled within one month; a reasoned extension of two months is possible under the statutory conditions.
You may complain to the competent supervisory authority, including the CNIL in France, and seek a judicial remedy.
6. Emails, tracking and third-party tools
Campaigns may contain individualised links and an open pixel. Events are linked to a contact, campaign, link and timestamp; email privacy protections can make statistics inaccurate. Customers determine campaign purposes and must inform recipients. Marketing consent and consent required for tracking are distinct. See Cookies and tracking for details.
Tools and agents you connect through API/MCP access data within your permissions; their own processing is also subject to their terms. Share only necessary data. Browsing the website is not treated as consent to AI, trackers or marketing.