GDPR Compliance

General information

This page provides information about how your use of a BEE service relates to the EU’s General Data Protection Regulation, or GDPR (GDPR – Official page, GDPR – Wikipedia page).

BEE is a service of MailUp, Inc., a Delaware corporation. MailUp Inc. acts both as a data controller and data processor under the GDPR (for more information about data controllers & data processors, please click here). Specifically, below please find a description of how your and your customers’ personally identifiable information is handled when our services are used.

BEE service infrastructure

The entire BEE system infrastructure is hosted on Amazon Web Services (Ireland region), using multiple instances propagated inside multiple availability zones. The service has been built to scale and support a high number of concurrent sessions. Security of the hosting facilities is managed directly by Amazon (see https://aws.amazon.com/security/).

MailUp, Inc. – which provides the BEE service – does not directly manage the AWS account, which is instead managed by its parent company. Specifically, MailUp, Inc. is a business unit within the MailUp Group, which is publicly traded on the Italian stock exchange. Everything from internal security policies to the AWS account is managed directly by MailUp Group. As a EU-based company, MailUp Group is particularly committed to GDPR compliance: you can read more about its infrastructure and focus on GDPR compliance at https://www.mailup.com/gdpr-infrastructure/

BEE Free

How data is processed

When you use BEE Free – the free version of our drag-n-drop email editor available at https://beefree.io – we process as Data Controller your email address and message content when you use the “Send a test” feature. Additionally, we act as Data Processor when you use email address and message content that belong to a third party. For example, we act as a Data Processor when you decide to use the “Send a test” feature to send a test email to a recipient who is not you.
All personal data is handled according to this Privacy Policy and may be handled through the sub-processors listed here.

Data processing addendum

Since this is a free service, we do not provide a Data Processing Addendum. When you use the “Send a test” feature, we recommend that you do not use third party data. That said, we will process such data in compliance with applicable laws and our Privacy Policy.

BEE Pro

How data is processed

When you use BEE Pro – the email creation suite available at https://beefree.io/bee-pro/ – we process as Data Controller your name, your email address, your email message content, and your IP address. Additionally, we may process as Data Processor the following information:

All personal data is handled according to this Privacy Policy and may be handled through the sub-processors listed here.

Data processing addendum

If you are using BEE Pro and have agreed to the BEE Pro terms of service, you do not need to sign an additional Data Processing Addendum as our user terms of service include a DPA. If you wish to have on file an executed DPA, you can download a signed Data Processing Agreement here.

Please note that we are not able to accommodate requests to sign a different Data Processing Addendum: our Data Processing Addendum should be sufficient in any relationship with MailUp, Inc, provider of the BEE Pro service.

BEE Plugin

How data is processed

When you use BEE Plugin – i.e. you embed the BEE editor inside your software applications – we may access and process as Data Processor your end-users’ IP addresses when they use the BEE editor’s features within your application. That data may be handled through the sub-processors listed here. MailUp, Inc. is also a data controller of your personal data as a BEE Plugin customer, and your information is handled according to this Privacy Policy.

Data processing addendum

If you are using BEE Plugin and have agreed to the BEE Plugin terms of service, you do not need to sign an additional Data Processing Addendum as our user terms of service include a DPA. If you wish to have on file an executed DPA, you can download a signed Data Processing Agreement here.

Please note that we are not able to accommodate requests to sign a different Data Processing Addendum: our Data Processing Addendum should be sufficient in any relationship with MailUp, Inc, provider of the BEE Plugin service.

Frequently asked questions on our DPA

Do I need to separately sign a Data Processing Agreement?

No, you do not need to do so. As discussed above, the Terms of Use of BEE Pro and BEE Plugin include a Data Processing Agreement. We provide a pre-signed version of the same DPA for those that wish to have an executed copy of the Agreement for sharing it with stakeholders or for internal record keeping.

Can I send you a different Data Processing Agreement?

Unfortunately we are not able to review & sign your DPA. We have thousands of customers and it would be impossible for us to do so. Our Data Processing Addendum should be sufficient in any relationship with MailUp, Inc.