Mailpro’s image and document space is designed to host the assets you use in campaigns — logos, banners, attachments, lead magnets. It is not a vault for confidential personal data. Treat it as a public-facing CDN, because that is how the URLs you generate behave.
Data you must not store on Mailpro
- Health records, medical or biometric data
- Financial account or card numbers (handled only by our PCI-compliant payment partners)
- National ID, passport, or social security numbers
- Login credentials, API keys, or shared secrets
- Internal trade secrets or confidential corporate information
- Third-party data covered by NDAs or vendor contracts
Data the platform IS designed for
Use the file space for marketing assets — logos, banner images, product photos, attachments to newsletters, lead magnets, and campaign templates. Contact lists you upload contain personal data, and we host them securely under data security rules — but the lists themselves should hold only the minimum needed to send the campaign.
Why this matters for compliance
Even on a secure platform, hosting confidential or special-category data creates GDPR exposure for you and for Mailpro. The acceptable-use rules in our Terms forbid sending sensitive personal data through email or SMS campaigns. Storing such data in the asset library carries the same risk profile.
Mailpro AI features
If you use Mailpro AI, the prompts you submit are transmitted to a third-party provider (such as OpenAI). Avoid pasting confidential or third-party data into AI prompts — once sent, it is processed under the AI provider’s terms.
Better options for genuinely confidential storage
Use a dedicated, encrypted data room or document-management system for confidential files. Mailpro is built for outbound marketing communications, not for archiving sensitive documents. For our retention practices on the data you do entrust to us, see data retention.
When in doubt, don’t upload it
If a file would be a problem if it ended up in a search engine, it should not live on Mailpro. Read our privacy policy for what we do with the data we hold.