Mailforge

Last updated: September 4, 2026

Privacy Policy

This policy describes data processed by Mailforge, Forge Labs' transactional email and campaign platform.

Data controller

Forge Labs — SIRET 105 814 891 00013 — 9 Rue Jean-Jacques Rousseau, 21000 Dijon, France.

Contact: contact@forgelabs.dev. Jacques Joly Blary is the publication director.

Data processed

Mailforge processes account and organization data, sender domains, contacts, lists, declared lawful bases, templates, campaigns, protected API keys and sending metadata.

Message content, delivery events and technical reply signals are processed to provide the service, stop sequences and support authorized audits.

Purposes

Processing is required to authenticate users, verify domains, deliver requested messages, prevent abuse, process bounces and complaints and secure the service.

Contact details submitted voluntarily are used to answer requests and manage the pre-contractual or contractual relationship.

Processors and hosting

The application and Mailu nodes run on Forge Labs infrastructure with European providers including Scaleway SAS, 8 rue de la Ville-l'Évêque, 75008 Paris, France.

Depending on the active route, Amazon Web Services may provide SES and an S3-compatible service may host campaign media.

Retention

Account data is retained for the service relationship and as required for legal and security obligations.

Sending logs and delivery events are kept as long as needed for support, auditing and abuse prevention, then deleted or anonymized under Forge Labs operational policy.

Your rights

You may request access, correction, deletion, restriction or portability and object to certain processing by emailing contact@forgelabs.dev.

Mailforge does not sell personal data and does not use recipient lists for advertising.

Security

Access is authenticated, secrets are not displayed after creation and organizations are logically isolated. Sender domains must pass DKIM verification before sending.

Amazon SES bounce and complaint events are monitored and may trigger automatic suppression or account suspension.