Privacy Policy (GDPR)

---

Last updated: February 2026 · Version 1.0

ZUMLOOX – kontakt@zumloox.com

• Email addresses (sender and recipient, hashed where possible)
• Technical logs (IP address, browser, device information)
• Message metadata and usage data
• Consent records

• Providing the service (sending and managing secure messages)
• Security and abuse prevention
• Legal compliance and dispute resolution
• Service improvement

We process data based on: your consent (Art. 6(1)(a) GDPR), performance of a contract (Art. 6(1)(b)), legal obligation (Art. 6(1)(c)), and legitimate interest (Art. 6(1)(f)) for security and fraud prevention.

• Active messages: until self-destruction or manual deletion
• Account data: while account is active, deleted within 30 days of request
• Logs: maximum 12 months
• Legal consent records: retained for legal compliance purposes

We do not sell your data. Data is shared only with GDPR-compliant data processors necessary for service operation (e.g., email delivery providers, hosting).

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion (right to be forgotten)
• Restrict processing
• Object to processing
• Data portability
• Withdraw consent at any time

Exercise your rights at Data Rights Request or email kontakt@zumloox.com.

We employ encryption, secure servers, access control, and monitoring to protect your data.

We use essential cookies only. See our Cookie Policy for details.

This service is not intended for users under 16 years of age.

Updates to this policy will require new consent. You will be notified and asked to re-accept updated terms.

 Under GDPR, you have the right to access, correct, delete your data, or withdraw your consent. Select a request type below.

Request data copy

Get a copy of all personal data we hold about you.

Request deletion

Request erasure of your personal data within 30 days.

Request correction

Correct inaccurate personal data.

Withdraw consent

Withdraw your legal consent. This will block access to the service.

All requests are processed within 30 days as required by GDPR. Contact kontakt@zumloox.com for urgent matters.

Last updated: February 2026 · Version 1.0

ZUMLOOX Secure provides self-destructing message delivery. The service is provided AS IS without warranties of any kind.

Message recovery is NOT guaranteed. Once a message self-destructs or is deleted, it cannot be recovered. ZUMLOOX bears no liability for failed message recovery.

• No liability for financial loss arising from service use
• No liability for indirect, consequential, or incidental damages
• No liability for service interruptions or downtime
• Maximum liability limited to fees paid in the preceding 12 months

Users are solely responsible for:

• The content of messages sent through the service
• Ensuring lawful use of the service
• Maintaining account security

Accounts may be suspended or terminated for abuse, fraud, illegal activity, or violation of the Acceptable Use Policy.

All intellectual property rights in the service are owned by ZUMLOOX. Users retain ownership of their message content.

These terms are governed by European Union law. Disputes shall be resolved in the courts of the applicable EU jurisdiction.

We reserve the right to modify these terms. Changes will require new user consent before continued use of the service.

  Last updated: February 2026 · Version 1.0

You must NOT use ZUMLOOX Secure for:

• Illegal communication – transmitting content that violates any applicable law
• Spam or bulk abuse – sending unsolicited bulk messages
• Fraud or impersonation – misrepresenting identity or intent
• Harassment or threats – intimidating, threatening, or harassing others
• System abuse – attempting to overload, hack, or compromise the service
• Malware distribution – sending viruses, trojans, or other malicious content
• Child exploitation material – absolutely prohibited, reported to authorities

Violations may result in:

• Immediate account suspension
• Permanent ban from the service
• Reporting to law enforcement authorities
• Legal action for damages

Report abuse to kontakt@zumloox.com.

  Last updated: February 2026 · Version 1.0

By default, ZUMLOOX Secure uses only essential cookies necessary for the service to function. These include:

• Session cookies – to maintain your login state
• Consent cookies – to remember your legal consent status
• Security cookies – to protect against abuse

We do not use tracking cookies, analytics cookies, or advertising cookies unless you explicitly consent.

If optional cookies (e.g., for analytics) are ever introduced, they will require explicit opt-in consent.

You can manage or delete cookies through your browser settings. Note that disabling essential cookies may affect service functionality.