Mailforge

Last updated: July 12, 2026

Privacy Policy

This policy describes the data processed by Mailforge, a transactional email service published by Forge Labs.

Data controller

Forge Labs — SIRET 105 814 891 00013 — 9 Rue Jean-Jacques Rousseau, 21000 Dijon, France.

Contact: contact@forgelabs.dev. Jacques Joly Blary is the publication director.

Data processed

Mailforge processes account and organization information, sender domains, protected API keys and sending metadata such as sender, recipient, subject, status, provider ID and delivery events.

Message content is processed only to deliver the requested communication and let the authorized organization review its sending log.

Purposes

Processing is required to authenticate users, verify domains, deliver requested messages, prevent abuse, process bounces and complaints and secure the service.

Contact details submitted voluntarily are used to answer requests and manage the pre-contractual or contractual relationship.

Processors and hosting

The application runs on Forge Labs infrastructure hosted with Scaleway SAS, 8 rue de la Ville-l'Évêque, 75008 Paris, France.

Amazon Web Services provides Amazon SES for email delivery and deliverability events under the regions and contractual safeguards configured for the service.

Retention

Account data is retained for the service relationship and as required for legal and security obligations.

Sending logs and delivery events are kept as long as needed for support, auditing and abuse prevention, then deleted or anonymized under Forge Labs operational policy.

Your rights

You may request access, correction, deletion, restriction or portability and object to certain processing by emailing contact@forgelabs.dev.

Mailforge does not sell personal data and does not use recipient lists for advertising.

Security

Access is authenticated, secrets are not displayed after creation and organizations are logically isolated. Sender domains must pass DKIM verification before sending.

Amazon SES bounce and complaint events are monitored and may trigger automatic suppression or account suspension.