Privacy policy

1. Information we process

• Account information such as name, email address, password hash, workspace membership, product communication preferences, and security sessions.
• Sender configuration including domains, DNS state, API keys stored as hashes, brand identity, templates, and automation settings.
• Recipient and consent information supplied by customers, including email addresses, attributes, consent evidence, suppressions, and list membership.
• Message and delivery records, including content, delivery events, complaints, bounces, opens, clicks, and provider identifiers.
• Operational information such as rate-limit counters, bounded diagnostics, audit events, and privacy-hashed network identifiers.

2. Why we process it

We process information to provide and secure the service, authenticate users, send requested email, enforce consent and suppression decisions, diagnose delivery, prevent abuse, provide analytics, meet legal obligations, and communicate about an account.

3. Customer and platform roles

For recipient data uploaded by a customer, the customer determines the sending purpose and is generally the controller or business. eimailar processes that information to provide the service. We act independently for account security, abuse prevention, billing, and legal compliance.

4. Sharing

Information is shared only with infrastructure and delivery providers needed to operate the service, with a workspace customer and its authorized users, or when required for security, legal compliance, or protection of rights. We do not sell personal information.

5. Retention

Records are retained for the period needed to provide the service and support delivery, security, dispute, and compliance needs. Suppression records may be retained longer so an opt-out, complaint, or hard bounce is not forgotten. Expired sessions and one-time credentials are invalidated and may be removed through maintenance jobs.

6. Security

Controls include hashed passwords and credentials, tenant-scoped authorization, expiring sessions, rate limits, sending approval, encrypted DKIM private material, durable delivery controls, and audit records. No system can eliminate every risk.

7. Your choices

Account users can update profile and security settings. eimailAr product updates require a separate confirmation and can be withdrawn in Account Settings. Email recipients can use the unsubscribe method in marketing messages. Depending on location, a person may request access, correction, deletion, restriction, or portability by contacting the customer that sent the email or eimailar when we control the relevant data.

8. Contact

Privacy questions can be sent to operator@eimailar.com. Include enough detail to locate the relevant account or message without sending passwords or API keys.