Last modified: June 8th, 2021 ecurity level we provide for protecting such information. By visiting protonmail.com and using the Services provided here, you agree to the terms outlined in th All data storage infrastructure is also located solely within Switzerland, and thus governed by the laws and regulations of Switzerland. Such data will only be used to contact you with important notifications about ProtonMail, to send you information related to security, to send you an invitation link to create your ProtonMail account, to verify your ProtonMail account, or to send you password recovery links if you enable the option. The Company is domiciled in Switzerland and all data storage infrastructure is also located solely within Switzerland, and thus governed by the laws and regulations of Switzerland.  You are free, at any given time, to opt-out of those features through the account settings panel. In order to pursue our legitimate interest of preventing the creation of accounts by spam bots or human spammers, ProtonMail uses a variety of human verification methods. You may be asked to verify using either reCaptcha, Email, or SMS. IP addresses, email addresses, and phone numbers provided are saved temporarily in order to send you a verification code and to determine if you are a spammer. If this data is saved permanently, it is always saved as a cryptographic hash, which ensures that the raw values cannot be deciphered by us. We also have no technical means to access your encrypted message contents. Account creation: It is not necessary to provide personal information in order to create an account, but you may provide an external email address for notification or password recovery purposes.  It is not necessary to provide personal information in order to create an account, Should you choose to provide it, we do associate another email address with your account (for password recovery, or notifications). The legal basis for processing is consent and you are free to remove that data in the account panel of your ProtonMail account.  Account activity: Due to limitations of the SMTP protocol, we have access to the following email metadata: sender and recipient email addresses, the IP address incoming messages originated from, message subject, and message sent and received times. We do NOT have access to encrypted message content but unencrypted messages sent from external providers to ProtonMail are scanned for Spam and Viruses to pursue the legitimate interest of the protection of our users. We also have access to the following records of account activity: number of messages sent, amount of storage space used, total number of messages, last login time.  Communicating with ProtonMail: Your communications with the Company, such as support requests, bug reports, or feature requests may be saved by our staff. IP Logging: By default, ProtonMail does not keep permanent IP logs. IP Logging: By default, ProtonMail does not keep permanent IP logs. We also don't record your login IP address unless this feature is specifically enabled by the user. However, IP logs are sometimes kept to combat abuse and fraud, and your IP address may be retained if you are engaged in activities that breach our terms and conditions (spamming, DDoS attacks against ProtonMail infrastructure, brute force attacks, etc). Anonymous cash or Bitcoin payments and donations are accepted however.   We also don't record your login IP address unless this feature is specifically enabled by the user. When you use our native applications, we (or the mobile app platform providers) may collect certain information in addition to the information mentioned elsewhere in this Policy. We may use mobile analytics software (such as fabric.io app statistics and crash reporting, Play Store app statistics, App Store app statistics, or self-hosted Sentry crash reporting) to send crash information to our developers so that we can fix bugs rapidly.   However, IP logs are sometimes kept to combat abuse and fraud, and your IP address may be retained if you are engaged in activities that breach our terms and conditions (spamming, DDoS attacks against ProtonMail infrastructure, brute force attacks, etc). The legal basis of this processing is our legitimate interest to protect our service against nefarious activities.  Payment Information: The Company relies on third parties to process credit card, PayPal, and Bitcoin transactions so the Company necessarily must share payment information with third parties. None of the software on our apps will ever access or track any location-based information from your device at any time. All servers used in connection with the provisioning of the Service are located in Switzerland and wholly owned and operated by the Company. Data is ALWAYS stored in encrypted format on our servers. Offline backups may be stored periodically, but these are also encrypted. We do not possess the ability to access any user encrypted message content on either the production servers or in the backups.  Through the Service, you can directly access, edit, delete or export personal data processed by the Company in your use of the Service.  If your account has been suspended for a breach of our terms and conditions, and you would like to exercise the rights related to your personal data, you can make a request to our support team. In case of violation of your rights, you have the right to lodge a complaint to the competent supervisory authority. ProtonMail may from time to time, contest requests if there is a public interest in doing so. In such situations, the Company will not comply with the request until all legal or other remedies have been exhausted. Therefore, not all requests described in our Transparency Report will lead to data disclosure. When a ProtonMail account is closed, data is immediately deleted from production servers. Active accounts will have data retained indefinitely. Deleted emails are also permanently deleted from production servers. Deleted data may be retained in our backups for up to 14 days. ProtonMail may from time to time, contest court orders if there is a public interest in doing so. In such situations, the Company will not comply with the court order until all legal or other remedies have been exhausted. Therefore, not all court orders described in our Transparency Report will lead to data disclosure  Data Disclosure We will only disclose the limited user data we possess if we are instructed to do so by a fully binding request coming from the competent Swiss authorities (legal obligation). While we may comply with electronically delivered notices (see exceptions below), the disclosed data can only be used in court after we have received an original copy of the court order by registered post or in person, and provide a formal response. If a request is made for encrypted message content that ProtonMail does not possess the ability to decrypt, the fully encrypted message content may be turned over. We will only disclose the limited user data we possess if we are instructed to do so by a fully binding request coming from the competent Swiss authorities (legal obligation). Continued use of the Service will be deemed as acceptance of such changes. If permitted by law, ProtonMail will always contact a user first before any data disclosure. Under Swiss law, it is obligatory to notify the target of a data request, although such notification may come from the authorities and not from the Company.  ProtonMail may from time to time, contest requests if there is a public interest in doing so. In such situations, the Company will not comply with the request until all legal or other remedies have been exhausted. Therefore, not all requests described in our Transparency Report will lead to data disclosure. ProtonMail reserves the right to periodically review and change this policy from time to time and we will notify users who have enabled the notification preference about changes to our Privacy Policy. Any controversy, claim, or dispute arising out of or relating to the Agreement shall be subject to the jurisdiction of the competent courts of the Canton of Geneva, the jurisdiction of the Swiss Federal Court being expressly reserved. 

Summary:
There is a date of the last update of the agreements. The court of law governing the terms is in a jurisdiction that is friendlier to user privacy protection.. The court of law governing the terms is in location Switzerland. Your personal data is used for limited purposes. The court of law governing the terms is in location Switzerland. You can opt out of promotional communications. The user is informed about security practices. User-generated content is encrypted, and this service cannot decrypt it. The service allows you to use pseudonyms. This service does not track you. The service provides details about what kinds of personal information they collect. IP addresses of website visitors are not tracked. IP addresses of website visitors are not tracked. This service offers an anonymous payment method. IP addresses of website visitors are not tracked. The service provides information about how they collect personal data. The service provides information about how they intend to use your personal data. This service does not collect, use, or share location data. Your data is processed and stored in a country that is friendlier to user privacy protection. Information is provided about security practices. You can request access and deletion of personal data. The service provides a complaint mechanism for the handling of personal data. The service will resist legal requests for user information where reasonably possible. You can delete your content from this service. The service's data retention period is kept to the minimum necessary for fulfilling its purposes. The service will resist legal requests for user information where reasonably possible. The service will not allow third parties to access your personal information without a legal basis. The service will only respond to government requests that are reasonable.  Terms may be changed any time at their discretion, without notice to the user . The service is transparent regarding government requests or inquiries that may involve user data.. The service will resist legal requests for user information where reasonably possible. The service may change its terms at any time, but the user will receive notification of the changes.. This service does not force users into binding arbitration.