Privacy Policy

Version 2026-10-23. Effective 23 October 2026.

This notice covers visitors and customers of the service. It does not describe your duties toward the people on your lists. Those duties are yours.

We keep the account email, billing state, and the records you save in the account. Mailbox passwords and API keys are encrypted at rest. Access to customer data is limited to what is needed to run and support the service. We do not sell personal data.

Data is kept while your account is active and deleted 30 days after it ends. You can export or delete a record sooner. Opt-outs are kept so they can be honored. Server logs are kept for at most 30 days.

Categories of providers: cloud hosting and database (data stored in Switzerland), a payment processor, an AI writing provider, and email infrastructure you connect. A named list is available on request to the account email. A breach that affects your account is notified to that email. We do not contact your recipients.

To ask about your own account data, use the data removal page.