Privacy policy
This policy is a starting template. Have it reviewed against the privacy law that applies to you before commercial launch.
What we store about you
Your name, email address, organization details and billing information. Passwords are stored only as a bcrypt hash and are never recoverable.
What we store about your contacts
The contact data you upload, plus delivery and engagement events for the mail you send them. Tracking records the time of an open or click, coarse device type, and the IP address of the request. We do not build cross-customer profiles of your contacts.
How long we keep it
Raw tracking events are kept for 180 days and normalized email events for one year; aggregated statistics are kept longer. Deleted contacts are purged after 30 days. Audit logs are kept for one year.
Your rights
You can export your data at any time and request deletion of your account and its contents. Your contacts can view and change their subscription through the preference link in any email they received, without needing an account.
Sub-processors
Email is delivered through our own mail servers rather than a third-party sending provider, so the content of your campaigns is not shared with an external email vendor.