Privacy Notice

We collect the following categories of personal data:

• Account data — name, email address, login credentials, and workspace settings.
• Mailbox connection data — OAuth tokens and mailbox metadata needed to send and sync email on your behalf.
• Campaign data — the prospect lists, lead details, and email content you upload or create in the Service.
• Support messages — communications you send to our support team.
• Usage and telemetry — feature usage, deliverability events (sends, opens, clicks, bounces), and log data.
• Device and technical data — IP address, browser type, device identifiers, and approximate location derived from IP.

We use personal data for the following purposes:

• Creating and managing your account and workspaces.
• Providing the Service, including sending campaigns, rotating mailboxes, tracking engagement, and running deliverability warmup.
• Security, fraud prevention, and abuse detection.
• Customer support and responding to your requests.
• Product improvement and analytics.
• Marketing communications, where permitted and with your consent where required.

We process personal data on the basis of: performance of our contract with you (providing the Service), our legitimate interests (security, fraud prevention, product improvement), your consent (where required, e.g. certain marketing), and compliance with legal obligations (tax, accounting, and law enforcement requests).

We share personal data with the following categories of recipients:

• Service providers and subprocessors — hosting, database, analytics, and support tooling providers who process data on our behalf.
• Merchant of Record (Paddle) — our online reseller Paddle.com processes payment, subscription management, tax compliance, and invoicing for purchases of the Service.
• Professional advisers — legal and accounting advisers where necessary.
• Authorities — where required by law or to protect our rights.

We keep personal data for as long as your account is active and as needed to provide the Service, comply with legal obligations, resolve disputes, and enforce agreements. When data is no longer needed, we delete or anonymize it.

Depending on where you live, you may have the right to:

• Access, correct, or delete your personal data.
• Restrict or object to certain processing, and request data portability.
• Withdraw consent at any time, where processing is based on consent.
• Lodge a complaint with your local data protection authority.

To exercise any of these rights, contact us at support@litmail.app. We respond within one month.

We apply appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, access controls, and row-level isolation between customer workspaces. No method of transmission or storage is 100% secure, but we work continuously to protect your data.

We use essential cookies required to operate the Service (authentication, session security) and, where enabled, analytics cookies to understand product usage. You can manage cookie preferences through your browser settings; disabling essential cookies may prevent sign-in.

Your data may be processed in countries other than your own, including where our service providers operate. Where required, we rely on appropriate safeguards such as standard contractual clauses for international transfers.

Questions about this notice or our data practices? Contact LitMail at support@litmail.app.