We take data protection seriously.
utobo email is GDPR compliant. Here is exactly how we handle your data and your customers' data under the General Data Protection Regulation.
Our role
When you use utobo email to send emails or store contacts, utobo email acts as a data processor. You are the data controller. We process personal data only to provide the service you've contracted us for — nothing else.
What data we process
- Email addresses of your recipients
- Names and contact properties you import
- Delivery events — open timestamps, click events, bounce records
- Your account information — name, email, billing details
Data storage
All data is stored on AWS infrastructure in the EU and US. Delivery logs and contact records are retained for the duration of your subscription. You can export or delete your data at any time from your dashboard.
Your rights and your contacts' rights
- Right to access — you can export all your data from the dashboard at any time
- Right to deletion — you can delete your account and all associated data
- Your contacts' unsubscribes are processed immediately and automatically
- Contact records can be deleted individually or in bulk via the API
Data Processing Agreement
A Data Processing Agreement (DPA) is available on request. Email legal@utobo.com with your company name and we'll send it within one business day.
Subprocessors
- Amazon Web Services — infrastructure and data storage
- Stripe — payment processing
- Supabase — database and authentication
- Google (Gemini API) — AI email drafting, spam scoring, and contact tagging
Questions about GDPR?
Contact privacy@utobo.com and we'll respond within one business day.