Privacy Policy

1. Data we collect

Account data you provide, such as your name, email address, password, and the workspaces and team members you set up.

Contact data you import to send email — names, email addresses, group membership, and any custom fields you add. You control this data and process it on your recipients' behalf.

Sending and engagement data generated as you use the product, including campaigns, templates, domains, and per-message events such as deliveries, opens, clicks, bounces, and complaints.

Technical data such as log and device information, and cookies used to keep you signed in (see our Cookie Policy).

2. How we use data

We use your data to operate the service, dispatch the email you create, render analytics, protect deliverability and sender reputation, secure the platform, provide support, and improve the product.

We do not sell your data or your contacts, and we never use the contacts you import to send our own marketing.

3. Email sending and suppression

Email is dispatched through Amazon SES. To protect the shared sending reputation, addresses that hard-bounce are added to a suppression list and excluded from future sends.

Engagement events are used to flag risky or unengaged addresses and to power the analytics on your contacts, groups, and campaigns.

4. Sharing and subprocessors

We share data with infrastructure providers strictly to deliver the service — including cloud hosting, our database provider, and Amazon SES for email delivery.

These subprocessors are bound by contractual obligations to protect your data and may only process it on our instructions.

5. Data retention

We keep account and sending data for as long as your account is active. Analytics history is visible according to your plan's retention window, and older data may be aggregated or purged.

You can delete contacts at any time, and deleting your workspace or account removes its associated data, subject to limited backups and legal retention requirements.

6. Security

We use industry-standard measures to protect your data, including encryption in transit, scoped API keys, and access controls around workspaces. No system is perfectly secure, so we encourage strong passwords and careful handling of your API keys.

7. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data. You can manage much of this in the product directly, or contact us to exercise these rights.

8. Contacting us

If you have any questions about this policy or how we handle your data, reach out through our contact page and we will respond promptly.