Privacy notice
Privacy for permission-based email operations.
This notice explains how M-Roc Mailing expects to handle personal data during the private pilot. It is a pilot notice and must be reviewed before any paid beta or production launch.
Last updated: 2026-06-09 EDT
Who this covers
This notice covers pilot users, customer operators, imported marketing contacts, support contacts and recipients who unsubscribe or are suppressed after a bounce or complaint.
For each pilot customer, M-Roc must record whether it acts as controller, processor or another role before importing real recipient data.
Data categories
- Account and organization data for authenticated users.
- Contact email addresses, names, source labels and consent notes.
- Campaign metadata, approvals, audience source and queue counters.
- Suppression data for unsubscribes, bounces, complaints and manual blocks.
- Operational logs, audit events and provider event metadata.
- Support messages shared through the public contact channel.
Purposes
- Operate tenant-scoped email marketing workflows.
- Validate consent, source and anti-abuse requirements before sending.
- Process unsubscribe, bounce and complaint events.
- Maintain audit trails for approvals, imports and suppression actions.
- Secure the service, monitor incidents and support pilot customers.
Provider and transfer review
M-Roc currently prepares Mailgun EU for the MVP pilot path. Mailgun is operated by Sinch Email, and the pilot gate requires review of the Sinch data processing agreement, sub-processors, account region and any CNDP transfer implications before a sending key is added.
Official references include the Sinch Data Processing Agreement, Sinch sub-processor list and the Moroccan Law 09-08 page from CNDP.
Retention and minimization
- Recipient emails stay on contact or suppression records, not audit metadata.
- Rendered email bodies and unsubscribe tokens must not be stored in logs.
- Suppression records stay active while needed to honor opt-out, bounce or complaint state.
- Exports remain limited until an audited export workflow exists.
Rights and requests
Pilot recipients may request access, correction, opposition, unsubscribe handling or deletion review through the public contact route. M-Roc will verify the tenant and list source before changing customer-owned records.