Tmailor is designed around minimal data collection and short retention. Here’s how that privacy-first setup aligns with GDPR and CCPA expectations in practice.