# Privacy Policy **TinyMail.ca — Canadian Business Email Hosting** **Effective Date:** October 23, 2026 **Last Updated:** October 23, 2026 ## 1. Introduction TinyMail.ca (“TinyMail,” “we,” “us,” or “our”) is a business email hosting service operated by Stuttgart Carriers Inc. We provide professional email hosting, custom-domain email, webmail access, email protocols, calendar and contact services, spam and malware filtering, and related technical support. We are committed to protecting the privacy, confidentiality, and security of personal information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and protect personal information when you visit tinymail.ca, purchase our services, communicate with us, or use our email hosting platform. Our privacy practices are intended to comply with applicable Canadian privacy legislation, including Alberta’s Personal Information Protection Act (PIPA) and the federal Personal Information Protection and Electronic Documents Act (PIPEDA), where applicable. By using our website or services, you acknowledge this Privacy Policy. ## 2. Information We Collect We collect only the information reasonably necessary to operate our services, process transactions, provide support, maintain security, and meet legal obligations. ### 2.1 Account and Customer Information Depending on how you use our services, we may collect: - Name and business name. - Email address and contact information. - Account login credentials and authentication information. - Customer-selected domain names and email addresses. - Service plan, mailbox configuration, and account settings. - Support requests and related correspondence. ### 2.2 Email and Hosted Content When you use TinyMail email hosting, our systems process and store information necessary to provide the service, including: - Email messages and attachments. - Sender and recipient addresses. - Message headers, timestamps, and delivery information. - Mailbox folders, contacts, calendars, and related data, where applicable. - Spam filtering, malware detection, and email delivery metadata. This information is processed to deliver, store, synchronize, filter, and secure your email and associated services. ### 2.3 Billing and Payment Information Payments may be processed through third-party payment providers, including Stripe, where applicable. We may receive transaction identifiers, payment status, billing details, and limited payment-related information needed to manage subscriptions, prevent fraud, and maintain financial records. Payment card details are handled according to the payment provider’s processes and are not intentionally stored by TinyMail unless expressly required for a supported payment function. ### 2.4 Technical and Security Information When you access our website or services, our systems may collect: - IP addresses and connection timestamps. - Browser and device information. - Authentication and access logs. - Email delivery and server diagnostic logs. - Security events, rate limits, and abuse indicators. This information helps us troubleshoot problems, protect accounts, detect unauthorized access, and maintain service reliability. ### 2.5 Website Forms and Support If you contact us through our website, email, or support system, we may collect the information you provide, including your name, email address, domain information, and the contents of your inquiry. ## 3. How We Use Information We use personal information for the following purposes: - Creating and administering customer accounts. - Providing email hosting, webmail, IMAP/SMTP access, and supported calendar and contact services. - Configuring and maintaining customer domains and mailboxes. - Processing payments and managing subscriptions. - Filtering spam and malware and preventing abuse. - Troubleshooting technical issues and responding to support requests. - Protecting our infrastructure against fraud, unauthorized access, and security incidents. - Maintaining backups, service continuity, and operational records. - Communicating essential service notices, billing information, and security alerts. - Meeting applicable legal, regulatory, and contractual requirements. We do not use the contents of customer emails for advertising or sell customer email content to advertisers. We will not use personal information for materially different purposes without obtaining consent where required by law. ## 4. Canadian Data Residency TinyMail is designed to provide Canadian-hosted business email services. Customer email and related service data are intended to remain within Canada, including the handling of customer information and support operations, subject to applicable legal requirements and the actual arrangements of our infrastructure and service providers. We use infrastructure and service providers as necessary to operate the platform. Customers should contact us if they require further information about the locations used for particular services or data-processing activities. We do not represent that every network connection, email transmission, or communication between external email providers is confined to Canada. Messages sent to or received from other providers may pass through systems and jurisdictions outside our control. ## 5. Disclosure to Third Parties We do not sell or rent personal information to third parties. We may disclose or make information available to third parties only as reasonably necessary for legitimate service purposes, including: - **Infrastructure and hosting providers:** To operate servers, storage, networking, backups, and related systems. - **Payment processors:** To process transactions, payments, refunds, and fraud prevention. - **Security and technical service providers:** To detect malicious activity, protect infrastructure, and resolve technical problems. - **Support and communications providers:** To receive, manage, and respond to customer inquiries. - **Professional advisers:** Where necessary for accounting, legal advice, or business administration. - **Authorities and legal parties:** Where disclosure is required or authorized by applicable law, court order, or other valid legal process. We seek to ensure that service providers handling personal information are subject to appropriate confidentiality and security obligations. We do not authorize service providers to use customer email content for their own advertising purposes. ## 6. Email Confidentiality and Access Customer email is private customer content. We do not routinely read customer email messages for general business purposes. However, limited access or processing may occur when necessary to: - Deliver and synchronize messages. - Apply spam and malware filtering. - Investigate technical faults, abuse, or security incidents. - Respond to a customer-authorized support request. - Protect the service and other customers. - Comply with applicable legal obligations. Where reasonably practicable, access to customer content for support or troubleshooting will be limited to what is necessary for the specific task. Customers are responsible for protecting their passwords, configuring authorized access, and ensuring that their own users comply with applicable laws. ## 7. Security Safeguards We use administrative, technical, and organizational safeguards appropriate to the nature and sensitivity of the information we handle. Depending on the service and system, safeguards may include: - Authentication and access controls. - Encrypted connections for supported services. - Network security and monitoring. - Spam and malware filtering. - Security logging and incident investigation. - Restricted administrative access. - Backup and recovery procedures. No internet service, email transmission, or storage system can be guaranteed to be completely secure. We cannot guarantee that unauthorized access, data loss, or other security incidents will never occur. If a privacy breach occurs, we will assess and respond to it in accordance with applicable legal requirements, including required notifications where applicable. ## 8. Data Retention and Deletion We retain personal information only for as long as reasonably necessary to provide our services, fulfill the purposes described in this policy, resolve disputes, maintain security, and comply with legal obligations. Retention periods vary according to the type of information and the purpose for which it is retained. - **Email and mailbox data:** Retained according to the customer's active service, mailbox settings, and applicable deletion or retention processes. - **Account information:** Retained while an account is active and for an appropriate period afterward when necessary for administration or legal obligations. - **Billing records:** Retained as necessary to meet accounting, tax, and legal requirements. - **Support records:** Retained as reasonably necessary to resolve inquiries, maintain service history, and address disputes. - **Technical and security logs:** Retained for operational, diagnostic, security, and compliance purposes, according to applicable retention practices. When information is no longer required, we will take reasonable steps to securely delete, destroy, or anonymize it, subject to applicable legal obligations and technical limitations. Deleting an account or cancelling a subscription does not necessarily result in the immediate removal of every backup, log, or record. Residual copies may remain until they are removed through ordinary retention and deletion processes. Customers should maintain independent backups of important email and other data. ## 9. Cookies and Website Analytics Our website may use cookies or similar technologies where needed for website functionality, security, preferences, or analytics. These technologies may help us understand website usage, maintain sessions, prevent abuse, and improve the user experience. You can manage cookies through your browser settings. Disabling certain cookies may affect website functionality or login sessions. If we introduce analytics, advertising measurement, or other tracking services, their use will be subject to applicable law and any required notice or consent. ## 10. Marketing Communications We may send service-related communications, including account notices, billing updates, security alerts, and important operational announcements. Where permitted, we may also send promotional communications about TinyMail services. You may opt out of promotional communications using the unsubscribe mechanism provided or by contacting us. Opting out of promotional messages will not prevent us from sending essential service or legally required communications. ## 11. Your Privacy Rights Subject to applicable law and any relevant exceptions, you may have the right to: - Request access to personal information we hold about you. - Request correction of inaccurate or incomplete personal information. - Ask questions about how we collect, use, store, or disclose information. - Withdraw consent for certain processing activities where consent is the applicable legal basis. - Request deletion of information where legally and operationally appropriate. - Submit a privacy complaint. We may need to verify your identity before responding to a request. Some information may be retained or withheld where permitted or required by law. To exercise these rights, contact us using the details in Section 15. ## 12. Children's Privacy TinyMail is intended for business and professional use and is not directed toward children. We do not knowingly collect personal information directly from children in violation of applicable law. If you believe a child has provided personal information to us inappropriately, please contact us so that we can review the matter. ## 13. External Websites and Third-Party Services Our website may contain links to third-party websites or services, including payment providers, software vendors, and email-client applications. Those services operate under their own privacy policies and practices. TinyMail is not responsible for the privacy, security, or content practices of external services that we do not control. We encourage customers to review the applicable third-party privacy policies before using those services. ## 14. Changes to This Privacy Policy We may update this Privacy Policy from time to time to reflect changes in our services, infrastructure, business practices, or legal requirements. The latest version will be published on tinymail.ca with its updated date. Where required by law, we will provide additional notice or obtain consent before implementing material changes. Continued use of our services after an update takes effect will be subject to applicable law and any consent requirements. ## 15. Contact Us For privacy questions, access requests, corrections, or complaints, contact: **TinyMail.ca** Operated by Stuttgart Carriers Inc. **Email:** support@tinymail.ca **Website:** https://www.tinymail.ca Please include “Privacy Request” in the subject line so your inquiry can be directed appropriately. We will review privacy inquiries and respond within the time required by applicable law. If you are not satisfied with our response, you may contact the applicable privacy regulator: - Office of the Information and Privacy Commissioner of Alberta: https://oipc.ab.ca/ - Office of the Privacy Commissioner of Canada: https://www.priv.gc.ca/ --- *This Privacy Policy describes TinyMail's intended privacy practices. It should be read together with the applicable service terms and any service-specific notices.*