Privacy Policy
Last updated 8 September 2026
The short version
We hold your email, so we can read it in the technical sense. We do not. We never scan your mail to build a profile, we never sell it, and we never use it to target advertising. Your mail sits on servers in Belgium, and it is yours to take away or delete at any time.
The formal version below says the same thing in the language the law asks for.
1. Who we are
Huppmail is operated by The Lift FZE, a company registered in the DWTC (Dubai World Trade Centre) Free Zone, Dubai, United Arab Emirates.
The Lift FZE
FZH 572 SRT, Floor 04, Sheikh Rashid Tower
DWTC, Dubai, United Arab Emirates
The Lift FZE is the data controller for the personal data described here. For any question about privacy, or to exercise any of the rights in section 8, write to info@huppmail.com.
EU representative (Article 27 GDPR). The Lift FZE is established outside the European Union, and has designated the following representative in the Union. Supervisory authorities and individuals may address it on any question about our processing of personal data:
UAB "IT forma"
J. Savickio g. 4-7, 01108 Vilnius, Lithuania
Company code 304523652, VAT LT100011451417
contact@itforma.lt
You may write to the representative or to us, whichever you prefer. Naming a representative does not reduce our own responsibility under the GDPR.
2. The data we hold
Your account
The email address you sign up with, a password stored only as a hash (never in a form we can read), your chosen mailbox address, your billing details, and the plan you are on.
The contents of your mailbox
This is the important one. Huppmail is an email service, so we necessarily store the messages you receive and send: their contents, their attachments, the addresses of the people who write to you and whom you write to, and the dates. Where you connect an existing Gmail account, we also store the messages we bring across from it, and the access token Google issues so we can continue to collect new mail.
Technical data
IP addresses, browser and device information, and session records, produced when you use the webmail or the app. Delivery logs recording that a message was accepted, delivered, deferred or bounced.
3. Why we hold it, and on what legal basis
| What for | Legal basis |
|---|---|
| Running the mailbox: receiving, storing, showing and sending your mail | Performance of the contract, Art. 6(1)(b) GDPR |
| Bringing across an existing Gmail account, when you ask us to | Performance of the contract, Art. 6(1)(b) GDPR |
| Billing, invoicing, and keeping the accounts | Contract and legal obligation, Art. 6(1)(b) and (c) GDPR |
| Keeping the service secure: abuse prevention, spam filtering, rate limiting | Legitimate interest, Art. 6(1)(f) GDPR |
| Support, when you write to us about a problem | Performance of the contract, Art. 6(1)(b) GDPR |
We do not process your mail for advertising, profiling or automated decision-making, on any basis.
4. Where your mail is stored
Mailbox contents are stored on servers located in Belgium, inside the European Union. Backups are held in the same location.
The company operating the service is established in the United Arab Emirates, so administration and support are carried out from there. That means personal data can be accessed from outside the EU by the people who run the service. Where such an access amounts to a transfer under Chapter V of the GDPR, it is made under the appropriate safeguards, and access is limited to what is needed to operate and support the service.
5. Who else sees it
We do not sell personal data, and we do not share it for anyone else's marketing.
A small number of providers necessarily handle some data so the service can work: the company hosting the servers in Belgium, the payment processor that takes your subscription (we never see or store your card number), and Google, where you have asked us to connect a Gmail account. Each acts under a contract and only on our instructions.
We disclose data to an authority only where we are legally obliged to, and we will tell you when we are permitted to do so.
6. How long we keep it
- Your mail is kept for as long as your account is open, because that is the service. You can delete any message at any time.
- After you close the account, mailbox contents and backups are deleted within 30 days.
- Delivery logs are kept for 90 days, so a delivery problem can be investigated.
- Invoices and accounting records are kept as long as the applicable law requires.
7. Cookies
Huppmail sets a cookie to keep you signed in, and one to remember display preferences such as how tightly the message list is packed. That is all. There are no advertising cookies, no tracking pixels, and no third-party analytics on this website.
8. Your rights
Where the GDPR applies to you, you have the right to ask for a copy of your data, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable form. You may also withdraw a consent you gave, without affecting what was done before you withdrew it.
Write to info@huppmail.com. We answer within one month. Your mail is already portable by design: it is standard email, and you can download it or move it elsewhere yourself.
If you believe we have handled your data wrongly, you may complain to the data protection authority in the EU country where you live.
9. Security
Connections to the service use TLS. Passwords are stored hashed. Access to the servers is restricted to the people who operate them, and mail is stored on infrastructure we control rather than on a third-party mail platform.
No service can promise perfect security. If a breach affects your personal data and is likely to present a risk to you, we will tell you and the competent authority within the time the law allows.
10. Children
Huppmail is not intended for children under 16, and we do not knowingly create accounts for them.
11. Changes
We may update this policy. For a change that materially affects you, we will write to the address on your account before it takes effect. The date at the top of this page always shows the current version.