Privacy Policy

Who we are

This policy explains how 172 Tech (“Hskky”, “we”, “us”), with its address for correspondence at SCO 197, Sector 7C, Chandigarh, India, collects and uses personal data when you use hskky.com, app.hskky.com and the Hskky email forwarding service. We are the data controller for this data.

Hskky exists to keep your email address private. We apply the same principle to our own handling of your data: we collect what we need to run the Service and nothing more.

What we collect

Account information

Your account email address and your verified destination addresses.
Login and security information needed to authenticate you, such as sign-in records.
Your plan, and the date you joined, upgraded or cancelled.

Alias records

Your aliases, their status (active or stopped), the destination each one forwards to, and when they were created, stopped or reactivated.

Forwarding information

Delivery records for forwarded messages, such as the alias, sender address and domain, time, size and delivery status. We use these to deliver mail, enforce plan limits, troubleshoot and prevent abuse.
The messages themselves, which pass through our systems so they can be forwarded. We process message content in transit to deliver it and to check for spam, malware and abuse. Messages are not kept after delivery except while queued for a retry when your destination provider is temporarily unavailable.

Payment information

Payments for Plus are processed by Paddle.com, our Merchant of Record. Paddle collects your payment details. We receive information about your subscription, such as its status, plan, country and billing dates. We never receive your full card number.

Website analytics

Our website uses Google Analytics to understand how visitors use our pages, such as which pages are viewed and how visitors arrived. We do not send the email addresses you type into our forms to Google Analytics.

Messages you send us

When you use our contact form, we receive your name, email address, topic and message. The form is operated by Formspree on our behalf.

How we use your data

To create and run your account and aliases, and to forward your email.
To verify destination addresses and keep accounts secure.
To enforce plan limits and our Acceptable Use Policy, and to prevent fraud and abuse.
To manage subscriptions with Paddle.
To answer your messages and send essential service notices, such as billing notices and changes to our terms.
To understand and improve how our website is used.

We do not sell your personal data, and we do not use the content of your email for advertising.

Legal bases for processing

We process personal data in line with India’s Digital Personal Data Protection Act, 2023 and, where they apply to you, other data protection laws such as the GDPR. Where those laws require a legal basis, we rely on:

Contract, to provide the Service you signed up for, including forwarding your email.
Legitimate interests, to keep the Service secure, prevent abuse and understand how our website is used.
Legal obligation, to keep records required by law and respond to lawful requests.
Consent, where required, for example for non-essential cookies in some regions.

We share personal data only with service providers that help us run Hskky, under contracts that require them to protect it and use it only on our instructions:

Paddle.com, our Merchant of Record, for payments, invoicing, tax and refunds.
Our hosting and email infrastructure providers, to run the Service and deliver mail. The Service is hosted in Bangalore, India.
Google, for website analytics through Google Analytics.
Formspree, to receive messages sent through our contact form.

We may also disclose data if required by law, to protect the rights and safety of our users or others, or as part of a merger or sale of the business, in which case this policy will continue to apply to your data.

International transfers

Hskky is operated from India and the Service is hosted in {HOSTING}. If you use Hskky from outside India, your personal data is transferred to and processed in India. Some of our service providers, such as Paddle, Google and Formspree, may process data in other countries. Where we transfer personal data internationally, we use appropriate safeguards such as standard contractual clauses.

How long we keep data

Account and alias records are kept while your account is open. When you close your account, we delete them, except where we must keep limited records for legal, tax or security reasons.
Stopped aliases are removed from active routing two months after being stopped.
Deleted custom alias names are kept permanently on a reserved list, without any message content, so that they can never be issued to someone else. This protects you from account takeover through a recycled address.
Forwarding records are kept for a limited period for delivery, troubleshooting and abuse prevention, then deleted.
Message content is not kept after delivery, except while waiting in a retry queue.
Contact form messages are kept as long as needed to deal with your request.

Security

We protect data with measures including encryption in transit, access controls and the principle of least privilege. No system is completely secure, but we work to protect your data and will notify you and the relevant authorities of a breach where the law requires.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal data, to object to or restrict certain processing, and to withdraw consent. You can delete aliases and close your account from the app at any time.

To make a request, use our contact form and choose “Privacy request”, sending it from the address registered to your account so we can verify it. You also have the right to complain to your local data protection authority.

Cookies

The Hskky app uses essential cookies to keep you signed in. Our website uses Google Analytics cookies to measure visits. You can block or delete cookies in your browser settings, and you can opt out of Google Analytics with Google’s browser add-on.

Children

Hskky is not intended for anyone under 16, or the age of digital consent in their country if higher. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will remove it.

Changes to this policy

We may update this policy. If we make significant changes, we will tell account holders by email or in the app before they take effect. The date at the top shows when it was last updated.

Contact

For questions about this policy or your data, use our contact form.