Draft — pending legal review. This page is not a legal document yet. The operator's legal name ([OPERATOR LEGAL NAME]), postal address ([OPERATOR POSTAL ADDRESS]) and company number ([OPERATOR COMPANY NUMBER]) are placeholders to be filled in before launch.
Privacy notice
This is a working draft. It is not a legal document yet, and the operator details, retention periods and subprocessor list are still to be confirmed before launch.
Who is responsible
The data controller is [OPERATOR LEGAL NAME], registered at [OPERATOR POSTAL ADDRESS], company number [OPERATOR COMPANY NUMBER]. For privacy questions, use the contact page. The processor role for customer subscriber data is described in the data processing agreement.
What we collect
Account and billing details for the person who signs up, store data you connect (catalog, orders and the events your storefront sends), and the subscriber data needed to send email on your behalf: email address, consent status, consent source and timestamp, and engagement events. The marketing site sets only the essential session cookies listed in the cookie notice.
Why we process it
To provide the service you asked for: building and sending email, showing results, and preventing abuse. AI features use brand, product and campaign data. Subscriber email addresses are never sent to the text model provider; product and brand details only. We do not sell personal data or use it to train a model for another customer.
Who processes it
We use a small set of subprocessors for hosting, email delivery, payments and AI inference. The current list, with purposes and locations, is published on the sub-processors page. Each provider is bound by data protection terms, and international transfers rely on the standard contractual clauses or an equivalent mechanism.
Retention and your rights
Account data is kept while the account is open and deleted within 30 days of closing, except where the law requires longer retention. You can export contacts, events and templates, or ask for deletion, from the settings page. Subscribers can unsubscribe from every email in one click, and their suppression record is kept so they are not contacted again. Depending on where you live, you may also have the right to access, correct, restrict or port your data, or to object to processing.
Security
Access is role-based, API keys are stored as hashes, webhook secrets are encrypted, and every tenant query is scoped to one account. Backups are tested. A suspected incident should be reported through the contact page; the DPA describes how a breach is notified to a customer.
Complaints
If a request cannot be resolved with us, you can complain to the data protection authority in your country. The final notice will name the operator's lead supervisory authority once the legal entity and its establishment are confirmed.