legal

Privacy Policy

Last updated: 16 July 2026

This policy explains what personal data SMTPlace collects, why, and the rights you have. SMTPlace is operated by Cruce Oy, a company registered in Finland ("we", "us"). Questions? Email cruce@cruce.fi.

Data controller

Cruce Oy is the data controller for personal data processed through smtplace.com. Contact: cruce@cruce.fi.

What we collect, and why

• The free converter. Files you upload are parsed in your browser session to produce the download. They are not stored on our servers.
• Account data. If you create an account, we store your email address, your organisation name, and a securely hashed password — to provide the account and Pro features.
• Saved projects (Pro). The placement data and settings you choose to save, so you can re-export them.
• Billing. Payments are handled by Stripe. We store your Stripe customer and subscription identifiers and your plan status — never your card number.
• Technical data. Standard server logs (IP address, browser type, pages requested) for security, abuse prevention and reliability.
• Cookies. See our Cookie Policy.

Legal bases (GDPR Article 6)

• Performance of a contract — providing your account, saved projects and subscription.
• Legitimate interests — keeping the service secure and reliable, and improving it.
• Consent — optional analytics cookies, which you can accept or decline.
• Legal obligation — keeping billing records where the law requires.

Who we share it with

We use a small number of processors: Stripe (payment processing), our hosting provider (running the server), and an email provider if we send you account emails. We do not sell your data and do not share it for advertising.

International transfers

Some processors (e.g. Stripe) may process data outside the EU/EEA, including in the United States, under appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep it

Account and project data are kept while your account is active and deleted on request or after prolonged inactivity. Server logs are kept for a limited period. Billing records are kept as required by Finnish accounting law.

Your rights

Under the GDPR you have the right to access, rectify, erase, restrict or object to processing, and to data portability, and to withdraw consent at any time. To exercise any of these, email cruce@cruce.fi. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto, tietosuoja.fi).

Changes

We may update this policy; material changes will be reflected here with a new "last updated" date.

See also: Terms of Service · Cookie Policy