Privacy Policy

1. Introduction

Welcome to LocaleMailer. We respect your privacy and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your information when you use our multilingual email marketing platform.

2. Who We Are

LocaleMailer is the data controller responsible for your personal data.

3. Data We Collect

We collect and process the following categories of personal data:

• Identity Data: first name, last name, username.
• Contact Data: email address, phone number, postal address.
• Technical Data: IP address, browser type, time zone, operating system.
• Usage Data: how you use our platform, campaigns sent, features used.
• Subscriber Data: data about your own subscribers that you upload to our platform.
• Billing Data: payment method details processed securely via Stripe.

4. How We Collect Your Data

• Direct interactions: when you register, configure your account, or contact us.
• Automated technologies: cookies and similar tracking as you use our platform.
• Third parties: authentication providers (Google, Microsoft) if you use OAuth sign-in.

5. How We Use Your Data

• To provide, operate, and improve our email marketing services.
• To process payments and manage your subscription.
• To send transactional emails (account confirmations, password resets, invoices).
• To send product updates and marketing communications (with your consent).
• To detect fraud and ensure platform security.
• To comply with legal obligations.

6. Your Subscriber Data

You retain full ownership of the subscriber data you upload to LocaleMailer. We act as a data processor on your behalf — we process that data only to deliver the services you request. You are responsible for:

• Obtaining valid consent from your subscribers before uploading their data.
• Honoring unsubscribe requests promptly.
• Complying with applicable email marketing laws in your jurisdiction.

7. Your Legal Rights (GDPR)

Under GDPR and applicable data protection laws, you have the right to:

• Access — request a copy of your personal data.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of your data ("right to be forgotten").
• Restriction — request we limit how we process your data.
• Portability — receive your data in a machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdraw consent — at any time, where processing is based on consent.

If you have an account, you can view, export and delete your data yourself at Privacy & your data.

To exercise any right, email us at privacy@localemailer.com. We will respond within 30 days.

8. Data Security

We implement industry-standard security measures including encryption in transit (TLS), encryption at rest, access controls, and regular security reviews. We use Supabase for data storage and Stripe for payment processing — both are SOC 2 compliant. Despite these measures, no system is 100% secure and we cannot guarantee absolute security.

9. Data Retention

We retain your personal data for as long as your account is active or as needed to provide services. Specifically:

• Account data: retained until you delete your account, then purged within 30 days.
• Campaign and analytics data: retained for the life of your account.
• Billing records: retained for 7 years for legal/tax compliance.
• Subscriber data you upload: deleted within 30 days of account closure on request.

10. Third-Party Services

We share data with the following trusted third-party processors:

• Supabase — database and authentication hosting.
• Brevo (Sendinblue) — email delivery infrastructure.
• Stripe — payment processing.
• Vercel — application hosting.
• Anthropic — AI writing assistant features.

Each processor is bound by a Data Processing Agreement and may not use your data for their own purposes.

11. Cookies

We use essential cookies required for authentication and session management. We do not use advertising or tracking cookies. You can disable cookies in your browser settings, though this may affect your ability to log in.

12. International Transfers

Your data may be processed outside your country of residence. Where data is transferred outside the EEA, we ensure appropriate safeguards are in place (Standard Contractual Clauses or equivalent).

13. Changes to This Policy

We may update this policy from time to time. We will notify you of material changes by email and by updating the "Last Updated" date above. Continued use of the platform after changes constitutes acceptance.

14. Contact Us

For any privacy questions or to exercise your rights: