Your emails never leave France.

Nor enter our heads.

Our four privacy commitments

1. France hosting

All your FrozenSpam infrastructure runs on bare metal OVH in France (Roubaix, ISO 27001 and HDS-certified datacenters). No email leaves French territory.

2. Content not analyzed by default

The filtering decision is made on metadata: sender, recipient, headers, SPF/DMARC result, presence in your whitelists. The mail body is not inspected unless you explicitly enable the Bayesian pre-filter (advanced option, off by default).

3. Nothing sent to third parties

Your emails are never sent to OpenAI, Google, Anthropic or any other third-party service. The FrozenSpam engine runs locally on our French servers, period.

4. GDPR native

DPA provided on request, right of access, rectification, erasure, portability respected systematically. Response to any request within 72 business hours.

What we store (and for how long)

What we never store

• Mail body beyond the quarantine window.
• Your contacts in clear (whitelists hashed in SHA-256 on request).
• Your passwords (Argon2id one-way hash).
• Your data after cancellation (30-day post-cancellation purge).

Your rights, exercised in two clicks

• Access: full JSON export of your account from the dashboard, anytime.
• Rectification: editable directly in the dashboard.
• Erasure: "Delete my account" button, immediate purge + backup purge at 30 days.
• Portability: standard open JSON export, re-importable elsewhere.

For any other request, write to the contact form — response within 72 business hours.

DPO

Data Protection Officer: Emmanuel Daunizeau, the contact form, +33 800 730 137.