Privacy Policy

1. Controller

Teton Mail is the controller for account data, billing records, and service logs on this site. Mail for an address is provided by a separate mail service, which is responsible for message content it stores. Contact privacy@teton.id. A formal data-protection officer, and an EU representative under GDPR Article 27 if one is required, will be named before the service is offered to people in the EEA.

2. Data we collect

We do not ask for full card numbers on our own systems. A card processor collects those. This website draft stores a simulated order in your browser’s sessionStorage. That data stays on your device and is not sent to us.

3. Purposes and legal bases

Where the GDPR applies, we rely on these bases:

• Contract (Article 6(1)(b)): assigning the address, keeping the account, billing the price you chose, and handling cancellation.
• Legal obligation (Article 6(1)(c)): tax and accounting records, and responding to lawful requests.
• Legitimate interests (Article 6(1)(f)): securing the site, preventing abuse of addresses, and keeping short security logs. You can object where the law gives you that right.

We do not sell personal data. If we later want optional analytics cookies, we will ask first and update this policy.

4. Mail

This site does not host your mail. A separate mail service provides mail for the address. That service, once it is operating, will describe how it handles messages. We do not store message content here, and we do not use it for advertising. Abuse reports you send us may include headers or a copy of a message so we can decide whether to suspend an address.

5. Sharing and processors

We share personal data with processors who work for us, under contracts that limit their use:

• Card payments: a PCI-compliant processor. The intended provider is Stripe.
• PayPal, if you choose it, which then processes that payment under its own terms.
• A crypto processor, only if that method is launched and you choose it. This draft is not connected to one.
• A separate mail service, once it is connected, for mail sent to or from the address. That service is not this website.
• A transactional email provider, for setup messages, invoices, and account notices to your contact email.

We also share information if the law requires it, to protect customers from active abuse, or as part of a merger or sale of the service. If ownership of the service changes, we will tell account holders.

6. International transfers

Account and billing data may be handled by processors in the United States or other countries, especially payment companies. Where we transfer personal data from the EEA or UK without an adequacy decision, we use the European Commission’s Standard Contractual Clauses, plus the UK addendum where needed. Where the separate mail service stores messages is described by that service.

7. Retention

• The address record: for the life of the account, then released so the name can be offered again, unless a legal hold applies.
• Site security logs: 12 months.
• Billing records: 7 years, or longer if tax law requires.
• Support tickets: 24 months after the ticket closes.
• Account profile: for the life of the account, then 24 months, unless a shorter period applies to a specific field.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or restrict personal data, to receive a portable copy, to object to processing based on legitimate interests, and to lodge a complaint with a supervisory authority. EEA residents can contact their local authority. UK residents can contact the ICO.

Send requests to privacy@teton.id from your account email when you have one. We may need to confirm it is you. We respond within one month, and we will tell you if a complex request needs up to two further months, as the GDPR allows.

Deleting the account releases the address on the schedule above. We may keep billing records we are legally required to keep. We may refuse a request that would erase evidence needed for an active abuse or legal matter, and we will explain the refusal unless the law forbids that.

California residents can ask us to disclose or delete personal information, and we do not sell or share it as those terms are used in the CCPA. Submit the same request to privacy@teton.id.

9. Cookies

The live account site will use an essential session cookie so you stay signed in. It is required for the service and is not used for advertising. This draft does not set tracking cookies. The buy flow uses sessionStorage on your device for the simulated order. You can clear it by closing the browser tab’s session or clearing site data.

10. Children

The service is not for anyone under 18. We do not knowingly create accounts for children. If you believe we have, write to privacy@teton.id and we will delete the account.

11. Changes

We will post changes on this page and update the date. Material changes will also be emailed to the account address before they take effect.

12. Contact

Privacy requests: privacy@teton.id. Security reports: security@teton.id. See also the Terms of Service.