Information we process
We process account details such as your name, email address, authentication and security events, workspace settings, campaign content, recipient records, delivery events, unsubscribe requests, and support messages. We also receive basic technical information needed to secure and operate the service, such as IP address, request identifiers, and browser information.
Do not put passwords, API keys, payment card data, or other secrets in campaign content or support forms. The frontend does not contain server secrets and runtime configuration contains public values only.
Why we use it
We use this information to provide the service, authenticate users, send and track campaigns, honour unsubscribes and suppression rules, respond to support requests, prevent abuse, maintain audit records, and meet legal obligations. We do not use recipient data for unrelated advertising.
Sharing and retention
We share information with infrastructure and email delivery providers only as needed to operate the service, and they may process it under their own terms and privacy notices. We retain information for as long as needed for the service, security, legal, dispute, and audit purposes, then delete or anonymise it according to our retention process.
The backend, database, hosting providers, and email provider enforce storage, access, deletion, and retention controls. A browser page cannot enforce those controls by itself.
Your choices
You may request access, correction, export, or deletion of information associated with your account, subject to legal and security checks. You can unsubscribe from a campaign using its unsubscribe link. Account deletion may be delayed where records must be retained for legal, fraud-prevention, or delivery purposes.
Contact [email protected] with the account email and a description of your request. Do not send passwords or reset tokens in that message.
Regional requirements
If you contact people in Kenya, the European Economic Area, the United Kingdom, or another regulated jurisdiction, you are responsible for having a lawful basis, providing required notices, and respecting applicable data-protection law. We maintain an incident response process; legal and regulatory advice should be obtained for your specific situation.
Questions or security reports: [email protected]