# Privacy Notes

BrandMail Pro is designed for transactional email branding and may process personal data supplied by WordPress, the site owner, or custom integrations.

## Logs

By default, BrandMail Pro stores delivery metadata only:

- Template key
- Recipient address
- Subject
- Delivery status
- Error message when available
- Created date
- Sanitized scalar metadata

Full HTML and plain-text email bodies are not stored by default.

Administrators can enable full body logging under **BrandMail Pro > Import / Export > Privacy and Data Retention** for troubleshooting. This should be used carefully because email bodies may contain personal data.

## Retention

The default log retention period is 30 days. Administrators can set retention from 1 to 365 days, or use 0 to keep logs until manual cleanup.

## Uninstall

The default uninstall behavior is to keep data. Administrators can choose to remove all BrandMail Pro data before uninstalling. When removal is selected, uninstall deletes BrandMail Pro options and the custom log table.