Last updated 3.9.2026
Alaniver, mailhost@alaniver.fi. For mail stored in your mailboxes we act as a processor on your behalf; for your customer account we are the controller.
Account details you give us (name, company, email, optional phone), your domains and mailbox settings, billing records from Stripe (never card numbers), support tickets, sign-in and API activity logs, and the contents of your mailboxes — which we store but do not read.
To provide the service you subscribed to, to bill for it, to answer support requests, to keep the platform secure (rate limits, abuse detection) and to meet accounting obligations.
Performing our contract with you (service and billing), our legitimate interest in keeping the service secure, and statutory obligations for accounting records.
Stripe (payments), Mailjet (outbound relay for delivery), and our server provider for hosting. Mail you send and receive naturally travels to and from the other parties you correspond with. We do not sell data or use it for advertising, ever.
The mail server and this service run on our own server hosted in Germany (EU). Stripe and Mailjet may process billing and delivery metadata inside and outside the EU under their standard data protection terms.
Account and mailbox data for as long as your subscription lasts, plus 30 days after it ends. Invoices for the statutory accounting period (currently 6 years). Sign-in and API logs for 12 months. Support tickets for 3 years.
You may access, correct, export or erase your data, object to processing and file a complaint with the Finnish Data Protection Ombudsman. Email mailhost@alaniver.fi and we will act within 30 days.
We use a session cookie for signing in, an optional 30-day cookie if you choose to be remembered on a device, and a language cookie. No advertising or analytics cookies, no third-party trackers.
Passwords are stored as bcrypt hashes and mailbox passwords as BLF-CRYPT. Sign-in requires an emailed one-time code in addition to the password. Traffic is TLS-encrypted, API keys are stored hashed, and payment card details never touch our servers.