# Privacy summary

> Data controller: IMAP Migrator. Governed by UK GDPR. Contact: info@whatsmyip.tr

- Message contents are never stored.
- Mailbox passwords: at most 24 hours after a run (for an ongoing sync, until it ends, 30 days at most).
- Detailed action logs: 90 days; migration summaries: 365 days; sign-in history: 365 days.
- Invoices: 6 years (UK tax law).
- Strictly necessary cookies only; no analytics or advertising cookies.
- Users can download their data and delete their account themselves.

Full policy: https://whatsmyip.tr/privacy.html