Privacy Policy

1. Information we collect

Information you provide

We may collect account and profile details, support communications, billing information where a paid plan applies, campaign settings, recipient lists, message content, templates, attachments, and other information you choose to submit.

Google account information

When you connect Gmail through Google OAuth, we receive the authorization tokens and limited Google account information needed to identify the connected sender and perform actions you authorize. We do not ask for or store your Google password.

Usage and technical information

We may collect IP address, browser and device type, operating system, timestamps, pages or features used, diagnostic events, security logs, and approximate location derived from an IP address.

Recipient and delivery information

When you run a campaign, we may process recipient addresses, personalization fields, Gmail message identifiers, queue and delivery status, bounce information, and campaign audit records. If open tracking is enabled, the tracking request may reveal the recipient’s IP address, user agent, timestamp, and an inferred open event. Email clients can block or prefetch tracking pixels, so open data is not always exact.

2. How we use information

We use information to:

• Provide accounts, campaign workspaces, personalization, Gmail delivery, and reporting.
• Generate PDFs or images in your browser and coordinate task state.
• Authenticate users, protect accounts, prevent abuse, and enforce sending limits.
• Operate, troubleshoot, measure, and improve the Service.
• Respond to support requests and send essential service or security notices.
• Comply with law and protect users, recipients, MailMex, and the public.

3. Gmail and Google API data

MailMex uses Google user data only to provide and improve the user-facing Gmail features you request, such as connecting a sender and transmitting a campaign. We do not sell Google user data, use it for targeted advertising, or allow humans to read it except with your affirmative permission, when necessary for security or support, or when required by law.

Your use of Gmail remains subject to Google’s terms and policies. You can revoke MailMex access at any time through your Google Account permissions; revocation may prevent Gmail sending features from working.

4. Browser-side processing

Some campaign preparation—including selected PDF, JPEG, and PNG rendering—occurs on your device. Browser-side processing reduces central rendering, but information may still be transmitted to MailMex, Google, recipients, and configured service providers where necessary to operate the campaign.

5. How we share information

We do not sell personal information. We may disclose it:

• To Google and other integrations you deliberately connect.
• To infrastructure, security, analytics, payment, and support providers acting for us under appropriate restrictions.
• At your direction, including to recipients when you send a campaign.
• To comply with law, legal process, or valid governmental requests.
• To protect rights and safety or investigate fraud, spam, abuse, or security incidents.
• As part of a merger, financing, reorganization, acquisition, or transfer of assets, subject to applicable law.

6. Cookies and local storage

We may use cookies, browser storage, and similar technologies for authentication, preferences, security, session continuity, and service measurement. You can control these through your browser, although disabling essential storage may prevent parts of MailMex from working.

7. Retention

We retain information for as long as reasonably necessary to provide the Service, maintain security and audit records, resolve disputes, enforce agreements, and meet legal obligations. Retention varies by data type and account status. Information may remain temporarily in backups after deletion. You may contact us to request account or personal-data deletion, subject to legal and operational exceptions.

8. Security

We use reasonable administrative, technical, and organizational safeguards appropriate to the information we process. No online service or storage system is completely secure, and we cannot guarantee absolute security. Keep your account and connected devices protected and notify us promptly if you suspect unauthorized access.

9. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to processing, or receive a portable copy of personal information, and to withdraw consent. You may also lodge a complaint with your local data-protection authority. We may need to verify your identity before fulfilling a request.

10. International processing

MailMex and its providers may process information in countries other than yours. Where required, we use recognized safeguards for international transfers and provide additional information upon request.

11. Children

The Service is not directed to children under 13, or a higher minimum age where required by local law. We do not knowingly collect personal information from children. Contact us if you believe a child has provided information to the Service.

12. Changes to this policy

We may update this Privacy Policy as the Service or law changes. We will post the revised version here, update the effective date, and provide additional notice when legally required.