Privacy Policy

What we collect, why, and how long we keep it.

Data we process

  • Account data: name, email, organization, hashed password, security settings and sign-in history.
  • Message data (as a processor on your behalf): sender, recipients, subject, headers needed for delivery, delivery events and SMTP responses. Message bodies are deleted after delivery unless you enable retention.
  • Billing data: plan, usage, invoices and payment records.
  • Operational logs: IP addresses and request metadata for security and abuse prevention. Secrets are redacted.
  • Site visits: for each page you open on this site we record the page path, the referring site, your IP address, your browser's user-agent string and, if you are signed in, your account. Query strings are not recorded. Platform administrators use this to understand traffic and investigate abuse. Visit records are deleted after 90 days.

How we use it

To provide and secure the Service, deliver your messages, handle bounces and complaints, bill you, and comply with legal obligations. We do not sell personal data and do not track message opens or clicks.

Retention

Message logs are kept for your organization's configured retention period and then deleted. Suppression entries are kept so that bounced or complaining addresses are not mailed again.

Your rights

You can export or delete your account data by contacting [email protected]. Recipients of messages sent by our customers should contact the sender directly; we will assist our customers with such requests.

Security

See our Security page for technical and organizational measures.