Zhost Consulting Private Limited, the operator of MailForge, takes data protection seriously. We have implemented technical and organisational measures to ensure our service meets GDPR obligations — both as a data processor (when handling your contacts' data) and as a data controller (when processing your account data).
| Data | Our Role | Your Role |
|---|---|---|
| Your account data (name, email, password, billing info) | Data Controller — we determine the purpose and means of processing | Data Subject |
| Your contacts' personal data (email lists, names, click data) | Data Processor — we process only on your documented instructions | Data Controller — you determine why and how contacts are emailed |
As a data controller for your contacts, you are responsible for ensuring you have a valid lawful basis (e.g., consent) for emailing each contact and that your use of MailForge complies with GDPR.
We process your account data under the following lawful bases:
Under GDPR, individuals have the following rights, which we honour within the required timeframes:
| Right | Description | Response Time |
|---|---|---|
| Access (Art. 15) | Obtain a copy of your personal data | 30 days |
| Rectification (Art. 16) | Correct inaccurate data | 30 days |
| Erasure (Art. 17) | Delete your personal data | 30 days |
| Restriction (Art. 18) | Limit how your data is processed | 30 days |
| Portability (Art. 20) | Receive your data in machine-readable format | 30 days |
| Objection (Art. 21) | Object to processing based on legitimate interests | 30 days |
To exercise any right, email privacy@marketing.bithost.in with the subject "GDPR Request". We will verify your identity before processing the request.
If you are not satisfied with our response, you have the right to lodge a complaint with your local supervisory authority (e.g., the ICO in the UK, or your country's Data Protection Authority).
If you are subject to GDPR and use MailForge to process personal data of EU/EEA individuals, a Data Processing Agreement (DPA) is required. Our DPA covers:
To request a DPA, contact us at privacy@marketing.bithost.in.
MailForge is operated by Zhost Consulting Private Limited, based in India. India is not currently an "adequacy decision" country under GDPR. When we transfer personal data from the EEA to India or other third countries, we rely on:
Your SMTP provider may also process data in additional countries per their own policies.
In the event of a personal data breach, we will:
We use the following sub-processors to operate the Service:
| Sub-processor | Purpose | Location |
|---|---|---|
| RazorPay | Payment processing | India |
| Your SMTP provider | Email delivery (configured by you) | Varies |
We will notify you of any changes to this list with at least 14 days' notice so you have the opportunity to object.
For all GDPR-related enquiries, data subject requests, or DPA requests:
We aim to respond within 30 days. Complex requests may take up to 90 days with prior notification.